AZ-700 Exam Questions

You have an Azure subscription that contains multiple virtual machines in the West US Azure region. You need to use Traffic Analytics. Which two resources should you create? Each c...

You have a hybrid environment that uses ExpressRoute to connect an on-premises network and Azure. You need to log the uptime and the latency of the connection periodically by using...

You have an Azure subscription that contains the following resources: - A virtual network named Vnet1 - Two subnets named subnet1 and AzureFirewallSubnet - A public Azure Firewall...

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 is associated to a network security group (NSG) named NSG1. NSG1 blocks all outbound traffic that is...

You have an Azure virtual network named Vnet1 that has one subnet. Vnet1 is in the West Europe Azure region. You deploy an Azure App Service app named App1 to the West Europe regio...

An ExpressRoute circuit denotes the logical connectivity between MS cloud services and on- premises infrastructure via a connectivity provider. Which of the following statement(s)...

While accomplishing your task, you need to centrally develop, enforce, and log applications and network connectivity policies across virtual networks and subscriptions. Which of th...

The Domain Name System (DNS) resolves or translates a service name to an IP address. Which of the following records types can't be used by Azure Private DNS?

You can use Virtual network peering to connect two or more Virtual Networks in Azure seamlessly. Which of the following benefits would you get using the virtual network peering? (C...

While working on Azure PowerShell, some of the values mentioned in the instructions are getting failed. One of your friends suggests you ensure that you have installed the latest v...

While working as a network administrator, you need to do DNS based global routing and don't have requirements for TLS (Transport Layer Security) protocol termination ("SSL offload"...

You are the team leader and you are addressing your team about the load balancing and various Azure load balancing services. Which of the following statements would you use to desc...

There are 6 traffic-routing methods in Azure Traffic Manager to control network traffic routing to the different service endpoints. Which Traffic manager routing method would you u...

Virtual Network NAT (Network Address Translation) eases outbound-only Internet connectivity for virtual networks. Which of the following statement(s) are true about NAT? (Choose tw...

You decide to protect your Azure Virtual Network resources using Azure Firewall. But there are a number of different possible issues with the Firewall. In case of the issue "Threat...

You need to configure a security policy. As a process, first you find the name for the resource group containing Front Door profile with the help of Get-AzResourceGroup. Now, which...

With the help of PowerShell, you need to retrieve/get an existing workspace named internWorkspace in a resource group named internWorkspaces. Which of the following cmdlets would y...

Azure Private Endpoint acts as a network interface to connect you to a service powered by Azure Private Link in a private and secure manner. Being the Private Link resource owner,...

You can get the current service tag and range information by downloading the JSON file or programmatically adding it as part of your on-premises firewall configuration. Which of th...

Regional VNet Integration enables connecting to a VNet in the same region with no need for a gateway. While using VNet Integration with VNets in the same region, which of the below...

You have Azure App Service apps in the West US Azure region as shown in the following table. You need to ensure that all the apps can access the resources in a virtual network name...

Case Study 1 - Litware. Inc Overview Litware. Inc. is a financial company that has a main datacenter in Boston and 20 branch offices across the United States. Users have Android, i...

You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virt...

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?

Your company has offices in Montreal, Seattle, and Paris. The outbound traffic from each office originates from a specific public IP address. You create an Azure Front Door instanc...

You have an Azure subscription that contains a user named Admin1 and a resource group named RG1. RG1 contains an Azure Network Watcher instance named NW1. You need to ensure that A...

You need to use Traffic Analytics to monitor the usage of applications deployed to Azure virtual machines. Which Azure Network Watcher feature should you implement first?

You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The subscription contains the following resources: - A virtual network named Vnet...

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named...

You have a hub-and-spoke topology. The topology includes multiple on-premises locations that connect to a hub virtual network in Azure via ExpressRoute circuits. You have an Azure...

Note: This QUESTION 1is part of a series of questions that present the same scenario. Each QUESTION 1in the series contains a unique solution that might meet the stated goals. Some...

Your company has offices in London, Tokyo, and New York. The company has a web app named App1 that has the Azure Traffic Manager profile shown in the following table. In Asia, you...

You have an Azure application gateway configured for a single website that is available at The application gateway contains one backend pool and one rule. The backend pool contains...

You have an Azure virtual machine named VM1. You need to capture all the network traffic of VM1 by using Azure Network Watcher. To which locations can the capture be written?

You have the Azure virtual networks shown in the following table. You have the Azure resources shown in the following table. You need to check latency between the resources by usin...

You have an Azure subscription that contains the resources shown in the following table. You need to ensure that the apps hosted on VM1 can resolve the IP address of the private en...

You have an Azure subscription that contains the resources shown in the following table. Gateway1 provides access to App1 by using a URL of https://app1.contoso.com. You create a n...

You are planning an Azure deployment that will contain three virtual networks in the East US Azure region as shown in the following table. A Site-to-Site VPN will connect Vnet1 to...

Your company has an office in New York. The company has an Azure subscription that contains the virtual networks shown in the following table. You need to connect the virtual netwo...

You have an Azure subscription that contains a virtual network. You plan to deploy an Azure VPN gateway and 90 Site-to-Site VPN connections. The solution must meet the following re...

You have an Azure subscription that contains the resources shown in the following table. You create a virtual network named Vnet2 in the West US region. You plan to enable peering...

Your company has four branch offices and an Azure subscription. The subscription contains an Azure VPN gateway named GW1. The branch offices are configured as shown in the followin...

You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must m...

Your company has five offices. Each office has a firewall device and a local internet connection. The offices connect to a third-party SD-WAN. You have an Azure subscription that c...

You have an Azure subscription mat contains tour virtual networks named VNet1, VNet2, VNet3, and VNet4. You plan to deploy a hub and spoke topology by using virtual network peering...

You have an Azure subscription that contains the following resources: - A virtual network named Vnet1 - Two subnets named subnet1 and AzureFirewallSubnet - A public Azure Firewall...

You have an internal Basic Azure Load Balancer named LB1 that has two frontend IP addresses. The backend pool of LB1 contains two Azure virtual machines named VM1 and VM2. You need...

Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SD-WAN). The SD-WAN uses BGP. You have an Azure subscription that contains 20 virt...

You have a network security group named NSG1. You need to enable network security group (NS) flow logs for NSG1. The solution must support retention policies. What should you creat...

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1. You have an Azure Firewall P...