Microsoft AZ-700 Exam Questions

Name: Microsoft AZ-700 Exam
Brand: Pass4Success
SKU: AZ-700
Price: 69.00 USD
Availability: InStock
Rating: 5.0 (22 reviews)

Exam Name: Designing and Implementing Microsoft Azure Networking Solutions

Exam Code: AZ-700

Related Certification(s): Microsoft Azure Network Engineer Associate Certification

Certification Provider: Microsoft

Number of AZ-700 practice questions in our database: 242 (updated: Oct. 02, 2024)

Expected AZ-700 Exam Topics, as suggested by Microsoft :

Topic 1: Design and implement core networking infrastructure: This section of the exam covers how to design and implement IP addressing for Azure resources, how to design and implement name resolution, design and implement VNet connectivity and routing, and network monitoring.
Topic 2: Design, implement, and manage connectivity services: In this section, the focus is given to how to design, implement, and manage a site-to-site VPN connection, design, implement, and manage a point-to-site VPN connection, design, implement, and manage Azure ExpressRoute, and design and implement an Azure Virtual WAN architecture.
Topic 3: Design and implement application delivery services: In this section of the exam, the focus is given to how to design and implement Azure Load Balancer and Azure Traffic Manager, how to design and implement Azure Application Gateway, and how to design and implement Azure Front Door.
Topic 4: Design and implement private access to Azure services: In this section of the exam, candidates are tested for their skill to design and implement Azure Private Link service and Azure private endpoints.
Topic 5: Design and implement Azure network security services: In this section, topics covered include Implementing and managing network security groups, how to implement Azure Firewall and Azure Firewall Manager, and implementing a Web Application Firewall (WAF) deployment.

Disscuss Microsoft AZ-700 Topics, Questions or Ask Anything Related

Submit Cancel

Talia

8 days ago

Whew, that exam was tough! Glad I used Pass4Success to prepare. Their materials were a lifesaver.

upvoted 0 times

...

Lashawna

10 days ago

That's helpful. Any final thoughts on your exam experience?

upvoted 0 times

...

Chaya

12 days ago

Excited to share that I passed the exam! The practice questions from Pass4Success were a great help. There was a tricky question on setting up a VPN Gateway for hybrid networking. I wasn't entirely sure about the correct SKU to choose, but I still made it.

upvoted 0 times

...

Barb

25 days ago

Overall, the exam was challenging but fair. I'm grateful to Pass4Success for providing relevant practice questions that helped me prepare efficiently. Their materials covered all the key topics and saved me a lot of time in my studies.

upvoted 0 times

...

Marcos

28 days ago

I just passed the Microsoft Designing and Implementing Microsoft Azure Networking Solutions exam! The Pass4Success practice questions were incredibly helpful. One question I remember was about configuring Network Security Groups (NSGs) to secure a subnet. I was a bit unsure about the priority rules, but I managed to get through it.

upvoted 0 times

...

Jerilyn

1 months ago

Just passed the Azure Networking Solutions exam! Thanks Pass4Success for the spot-on practice questions.

upvoted 0 times

...

Narcisa

2 months ago

Passing the Microsoft Designing and Implementing Microsoft Azure Networking Solutions exam was a great achievement for me, and I attribute my success to using Pass4Success practice questions. The exam covered topics such as designing and implementing core networking infrastructure, as well as managing connectivity services. One question that I found challenging was related to designing and implementing Azure ExpressRoute. Despite my uncertainty about the answer, I was able to pass the exam.

upvoted 0 times

...

Lashaunda

3 months ago

My exam experience for the Microsoft Designing and Implementing Microsoft Azure Networking Solutions exam was successful, thanks to using Pass4Success practice questions. The exam focused on designing and implementing core networking infrastructure, as well as managing connectivity services. One question that I remember from the exam was related to designing, implementing, and managing a site-to-site VPN connection. Although I had some doubts about my answer, I was able to pass the exam.

upvoted 0 times

...

Gabriele

3 months ago

Just passed the Azure Networking Solutions exam! Expect questions on virtual network peering configurations. Focus on understanding different peering types and their limitations. Big thanks to Pass4Success for their spot-on practice questions – they really helped me prepare efficiently!

upvoted 0 times

...

Maurine

4 months ago

I recently passed the Microsoft Designing and Implementing Microsoft Azure Networking Solutions exam with the help of Pass4Success practice questions. The exam covered topics such as designing and implementing core networking infrastructure, as well as managing connectivity services. One question that stood out to me was related to designing and implementing VNet connectivity and routing. I wasn't completely sure of the answer, but I managed to pass the exam.

upvoted 0 times

...

Tarra

4 months ago

Azure Firewall implementation was a key focus. Practice designing rules and understanding service tags. Pass4Success provided great exam-like questions that boosted my confidence and helped me pass.

upvoted 0 times

...

Free Microsoft AZ-700 Exam Actual Questions

Note: Premium Questions for AZ-700 were last updated On Oct. 02, 2024 (see below)

Question #1

You have an on-premises DNS server named Server1 that hosts a primary DNS zone named fabrikam.com.

You have an Azure subscription that contains the resources shown in the following table.

Users on the on-premises network access resources on all the virtual networks by using a Site-to-Site (S2S) VPN. You need to deploy an Azure DNS Private Resolver solution that meets the following requirements:

* Resources connected to the virtual networks must be able to resolve DNS names for fabrikam.com.

* Server1 must be able to resolve the DNS names of the resources in contoso.com.

* The solution must minimize costs and administrative effort.

What is the minimum number of resolvers you should deploy?

Reveal Solution

Correct Answer: B

Question #2

SIMULATION

Task 1

You plan to deploy a firewall to subnetl-2. The firewall will have an IP address of 10.1.2.4.

You need to ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the firewall that will be deployed to subnetl-2. The solution must be achieved without using dynamic routing protocols.

ASee the Explanation below for step by step instructions

Reveal Solution

Correct Answer: A

To deploy a firewall to subnetl-2, you need to create a network virtual appliance (NVA) in the same virtual network as subnetl-2.An NVA is a virtual machine that performs network functions, such as firewall, routing, or load balancing1.

To create an NVA, you need to create a virtual machine in the Azure portal and select an image that has the firewall software installed.You can choose from the Azure Marketplace or upload your own image2.

To assign the IP address of 10.1.2.4 to the NVA, you need to create a static private IP address for the network interface of the virtual machine.You can do this in the IP configurations settings of the network interface3.

To ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the NVA, you need to create a user-defined route (UDR) table and associate it with subnetl-1.A UDR table allows you to override the default routing behavior of Azure and specify custom routes for your subnets4.

To create a UDR table, you need to go to the Route tables service in the Azure portal and select + Create.You can give a name and a resource group for the route table5.

To create a custom route, you need to select Routes in the route table and select + Add.You can enter the following information for the route5:

Destination: 192.168.10.0/24

Next hop type: Virtual appliance

Next hop address: 10.1.2.4

To associate the route table with subnetl-1, you need to select Subnets in the route table and select + Associate.You can select the virtual network and subnet that you want to associate with the route table5.

Question #3

SIMULATION

Task 2

You need to create an Azure Firewall instance named FW1 that meets the following requirements:

* Has an IP address from the address range of 10.1.255.0/24

* Uses a new Premium firewall policy named FW-pohcy1

* Routes traffic directly to the internet

ASee the Explanation below for step by step instructions

Reveal Solution

Correct Answer: A

To create an Azure Firewall instance, you need to go to the Azure portal and select Create a resource. Type firewall in the search box and press Enter.Select Firewall and then select Create1.

To assign an IP address from the address range of 10.1.255.0/24 to the firewall, you need to select a public IP address that belongs to that range.You can either create a new public IP address or use an existing one1.

To use a new Premium firewall policy named FW-policy1, you need to select Premium as the Firewall tier and create a new policy with the name FW-policy12.A Premium firewall policy allows you to configure advanced features such as TLS Inspection, IDPS, URL Filtering, and Web Categories3.

To route traffic directly to the internet, you need to enable SNAT (Source Network Address Translation) for the firewall.SNAT allows the firewall to use its public IP address as the source address for outbound traffic4.

Question #4

SIMULATION

Task 3

You plan to implement an Azure application gateway in the East US Azure region. The application gateway will have Web Application Firewall (WAF) enabled.

You need to create a policy that can be linked to the planned application gateway. The policy must block connections from IP addresses in the 131.107.150.0/24 range. You do NOT need to provision the application gateway to complete this task.

ASee the Explanation below for step by step instructions

Reveal Solution

Correct Answer: A

Here are the steps and explanations for creating a policy that can be linked to the planned application gateway and block connections from IP addresses in the 131.107.150.0/24 range:

To create a policy, you need to go to the Azure portal and selectCreate a resource.Search forWAF, selectWeb Application Firewall, then selectCreate1.

On theCreate a WAF policypage,Basicstab, enter or select the following information and accept the defaults for the remaining settings:

Policy for: Regional WAF (Application Gateway)

Subscription: Select your subscription name

Resource group: Select your resource group

Policy name: Type a unique name for your WAF policy

On theCustom rulestab, selectAdd a ruleto create a custom rule that blocks connections from IP addresses in the 131.107.150.0/24 range2. Enter or select the following information for the custom rule:

Rule name: Type a unique name for your custom rule

Priority: Type a number that indicates the order of evaluation for this rule

Rule type: Select Match rule

Match variable: Select RemoteAddr

Operator: Select IPMatch

Match values: Type 131.107.150.0/24

Action: Select Block

On theReview + createtab, review your settings and selectCreateto create your WAF policy1.

To link your policy to the planned application gateway, you need to go to theApplication Gatewayservice in the Azure portal and select your application gateway3.

On theWeb application firewalltab, select your WAF policy from the drop-down list and selectSave

Question #5

SIMULATION

Task 4

You need to ensure that connections to the storage34280945 storage account can be made by using an IP address in the 10.1.1.0/24 range and the name storage34280945.pnvatelinlcblob.core.windows.net.

ASee the Explanation below for step by step instructions

Reveal Solution

Correct Answer: A

Here are the steps and explanations for ensuring that connections to the storage34280945 storage account can be made by using an IP address in the 10.1.1.0/24 range and the name stor-age34280945.pnvatelinlcblob.core.windows.net:

To allow access from a specific IP address range, you need to configure the Azure Storage firewall and virtual network settings for your storage account.You can do this in the Azure portal by selecting your storage account and then selecting Networking under Settings1.

On the Networking page, select Firewalls and virtual networks, and then select Selected networks under Allow access from1. This will block all access to your storage account except from the networks or resources that you specify.

Under Firewall, select Add rule, and then enter 10.1.1.0/24 as the IP address or range.You can also enter an optional rule name and description1. This will allow access from any IP address in the 10.1.1.0/24 range.

Select Save to apply your changes1.

To map a custom domain name to your storage account, you need to create a CNAME record with your domain provider that points to your storage account endpoint2. A CNAME record is a type of DNS record that maps a source domain name to a destination domain name.

Create a CNAME record with the following information2:

Source domain name: stor-age34280945.pnvatelinlcblob.core.windows.net

Destination domain name: stor-age34280945.pnvatelinlcblob.core.windows.net

Save your changes and wait for the DNS propagation to take effect2.

To register the custom domain name with Azure, you need to go back to the Azure portal and select your storage account.Then select Custom domain under Blob service2.

On the Custom domain page, enter stor-age34280945.pnvatelinlcblob.core.windows.net as the custom domain name and select Save2.

Unlock Premium AZ-700 Exam Questions with Advanced Practice Test Features:

Select Question Types you want
Set your Desired Pass Percentage
Allocate Time (Hours : Minutes)
Create Multiple Practice tests with Limited Questions
Customer Support

Get Full Access Now