Microsoft Exam AZ-700 Topic 4 Question 77 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 77
Topic #: 4

You have an Azure subscription that contains a virtual machine named VM1 and a network security group (NSG) named NSG1. NSG1 has the default rules configured VM1 runs Windows Server and contains a single NIC named NIC1 NIC! is associated with NSG1.

You need to prevent access to the Azure Instance Metadata Service (IMDS) REST API on VM1 The solution must minimize administrative effort.

What should you add to NSG1?

Aan outbound rule that blocks traffic to an IP address

Ban outbound rule that blocks traffic to a service tag

Can inbound and outbound rule that blocks traffic to an application security group.

Dan inbound rule that blocks traffic to an IP address

Show Suggested Answer

Suggested Answer: A

Here are the steps and explanations for ensuring that requests for wwwjelecloud.com from any of your Azure virtual networks resolve to frontdoor1.azurefd.net:

To use a custom domain with your Azure Front Door, you need to create a CNAME record with your domain provider that points to the Front Door default frontend host.A CNAME record is a type of DNS record that maps a source domain name to a destination domain name1.

To create a CNAME record, you need to sign in to your domain registrar's website and go to the page for managing DNS settings1.

Create a CNAME record with the following information1:

Source domain name: wwwjelecloud.com

Destination domain name: frontdoor1.azurefd.net

Save your changes and wait for the DNS propagation to take effect1.

To verify the custom domain, you need to go to the Azure portal and select your Front Door profile.Then select Domains under Settings and select Add2.

On the Add a domain page, select Non-Azure validated domain as the Domain type and enter wwwjelecloud.com as the Domain name.Then select Add2.

On the Domains page, select wwwjelecloud.com and select Verify.This will check if the CNAME record is correctly configured2.

Once the domain is verified, you can associate it with your Front Door endpoint. On the Domains page, select wwwjelecloud.com and select Associate endpoint.Then select your Front Door endpoint from the drop-down list and select Associate2.

by Jodi at Dec 06, 2024, 04:20 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashon

14 days ago

Forget all this networking stuff, I'm just going to use the IMDS API to order some tacos. What could go wrong?

upvoted 0 times

...

Margret

18 days ago

Ha! I bet the exam writers are trying to trip us up with these options. Let's see, B seems like the winner to me.

upvoted 0 times

Jeanice

24 hours ago

User2: Yeah, I agree. B sounds like the right choice.

upvoted 0 times

...

Chandra

2 days ago

User1: I think B is the best option.

upvoted 0 times

...

Corrina

22 days ago

This is a tricky one. I was considering C, but I'm not sure if adding both inbound and outbound rules is really necessary to achieve the desired outcome.

upvoted 0 times

Carlene

4 days ago

User1: I think D is the correct option. Just block traffic to the IP address.

upvoted 0 times

...

Eden

27 days ago

I'm not sure about this one. Wouldn't an inbound rule that blocks traffic to an IP address (D) be a more targeted solution?

upvoted 0 times

Rebeca

10 days ago

User2: I disagree, I believe an inbound rule that blocks traffic to an IP address (D) would be more effective.

upvoted 0 times

...

Shalon

14 days ago

User1: I think an outbound rule that blocks traffic to an IP address (A) would be the best option.

upvoted 0 times

...

Felicitas

1 months ago

Hmm, I think B is the correct answer. Blocking traffic to the IMDS service tag seems like the most straightforward way to prevent access to the IMDS REST API.

upvoted 0 times