You have an Azure subscription that is linked to an Azure AD tenant named contoso.onmicrosoft.com. The subscription contains the following resources:
* A virtual network named Vnet1
* An App Service plan named ASPI
* An Azure App Service named webapp1
* An Azure private DNS zone named private.contoso.com
* Virtual machines on Vnet1 that cannot communicate outside the virtual network
You need to ensure that the virtual machines on Vnet1 can access webapp1 by using a URL of https:/Avwwprivate.contosocom.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Suggested Answer: A, D
Get Premium AZ-700 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
16 comments · newest first
JE
Jenifer
11 months ago
I'm surprised there's no mention of network security groups here!
TE
Terry
11 months ago
A is a must, but C seems a bit tricky.
TE
Tequila
12 months ago
Wait, why would you need to register an enterprise app for this? Sounds off.
TR
Trinidad
12 months ago
I think B could work too, but not sure if it's the best option here.
SA
Santos
1 year ago
Definitely A and C! That's the way to go.
LE
Lera
1 year ago
I’m confused about the CNAME records. There are so many options! I hope we don’t need to register an enterprise application for this scenario.
MA
Margurite
1 year ago
I feel like we should also create a CNAME record for the private DNS zone. Mapping it to the private link address sounds familiar from our study sessions.
BE
Bettyann
1 year ago
I'm not entirely sure about the service endpoint option. I remember it being mentioned in practice questions, but I can't recall if it's the best choice here.
KY
Kyoko
1 year ago
I think creating a private endpoint for webapp1 is definitely one of the actions we need to take. It seems like the right way to connect securely.
BE
Benedict
1 year ago
I'm a bit confused by the options. I'll have to re-read the question and think about the different approaches mentioned.
GR
Grover
1 year ago
I'm a bit confused on the difference between the two trust provisions. I'll need to review the details and make sure I understand the implications for the gift tax exclusion.
DA
Daren
1 year ago
High employee turnover in vulnerable areas? That's definitely a red flag. I'm going to have to read through this a few times to make sure I understand which one is the exception here.
TA
Tammara
1 year ago
Okay, let me think this through. Partially configured sites that are missing the central computer... that sounds like it could be describing a "warm site" setup, where the basic infrastructure is in place but the main systems aren't fully operational. I'm leaning towards B, but I'll review my notes just to make sure.
JE
Jeannine
1 year ago
Okay, let me break this down step-by-step. The cloud service consumer was able to use Cloud Service A to access the physical server, and then attack Cloud Service B. That sounds like a vulnerability in the authorization or access control mechanisms. I'm leaning towards B or C as the best answer.
JO
Joanne
1 year ago
Hmm, I'm a bit confused. The question mentions scaling out, but option B says to scale out the App Service plan. Isn't that different from scaling up? I'll need to double-check the differences between scaling up and scaling out.
RO
Rocco
1 year ago
Hmm, this seems pretty straightforward. I'll just need to double-check the specs on the Huawei 1288H V5 to confirm if it supports up to two high-performance GPUs.