AZ-700 Practice Test

You have an Azure virtual network named Vnet1.
You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.
Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.

A.

an allow rule that has the IP address range of Vnet1 as the source and destination of Sq1.EastUS

B.

a deny rule that has a source of VirtualNetwork and a destination of Sq1

C.

a deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24

D.

a deny rule that has the IP address range of Vnet1 as the source and destination of Storage

Your on-premises network contains a VPN device.
You have an Azure subscription that contains a virtual network and a virtual network gateway.
You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the public IP addresses shown in the following table.

You plan to deploy a NAT gateway named NAT1.
Which public IP addresses can be used as the public IP address for NAT1?

A.

IP3 and IP5 only

B.

IP5 only

C.

IP1, IP3, and IP5 only

D.

IP3 only

E.

IP2 and IP4 only

You have an Azure subscription that contains the Azure app service web apps show in the following table:

You need to deploy Azure Traffic Manager. The solution must meet the following requirements:
• Traffic to https//www.fabrikam.com must be directed to App1eu.
• If App1eu becomes unresponsive, all the traffic to https://www.fabrikam.com must be directed to App1us. You need to implement Traffic Manager to meet the requirements.
Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A.

a Traffic Manager profile that uses the priority routing method

B.

a Traffic Manager profile that uses the geographic routing method C a CNAME record in a DNS domain named fabrikam.com

C.

a TXT record in a DNS domain named tabrikam.com

D.

a real user measurements key in Traffic Manager

You have an Azure subscription. The subscription contains virtual machines that host websites as shown in the following table.

You have the Azure Traffic Manager profiles shown in the following table.

You have the endpoints shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each connect selection is worth one point.