Designing and Implementing Microsoft Azure Networking Solutions (AZ-700) Certification Sample Questions

The purpose of this Sample Question Set is to provide you with information about the Designing and Implementing Microsoft Azure Networking Solutions exam. These sample questions will make you very familiar with both the type and the difficulty level of the questions on the AZ-700 certification test. To get familiar with real exam environment, we suggest you try our Sample Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Exam. This sample practice exam gives you the feeling of reality and is a clue to the questions asked in the actual Microsoft Certified - Azure Network Engineer Associate certification exam.

These sample questions are simple and basic questions that represent likeness to the real Microsoft AZ-700 exam questions. To assess your readiness and performance with real time scenario based questions, we suggest you prepare with our Premium Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Exam. When you solve real time scenario based questions practically, you come across many difficulties that give you an opportunity to improve.

Microsoft AZ-700 Sample Questions:

01. You add an origin to an Azure Front Door Premium origin group and enable Private Link to a private link service named Link1. The managed private endpoint request now appears as Pending on Link1. What should you do next to make the origin connection usable?
a) Approve the pending private endpoint connection on Link1.

b) Delete and recreate Link1.

c) Delete and recreate the Front Door profile.

d) Change the Front Door profile from Premium to Standard.

02. A remote worker must connect Client1 to Azure VPN Gateway by using a point-to-site VPN with certificate authentication. The root and client certificates will be managed by your organization.

Which three actions are required?

Each correct answer presents part of the solution.

a) Deploy a RADIUS authentication server.

b) Generate the P2S VPN client profile and configure it on Client1.

c) Upload the trusted root certificate's public key information to the P2S gateway configuration.

d) Enable Microsoft Entra multifactor authentication on VPNGw1.

e) Install a client certificate issued by the trusted root certificate on Client1.

03. VNet1 is connected to an on-premises Active Directory Domain Services domain named contoso.com. DC1 is the on-premises DNS server authoritative for the domain. VM1 in VNet1 must resolve the domain records and join the domain. The solution should apply to workloads in VNet1 with minimal per-VM administration.

What should you configure?
a) Configure VM1 to use 168.63.129.16 directly.

b) Set VNet1's DNS server address to a public recursive resolver.

c) Create an empty Azure Private DNS zone named contoso.com.

d) Set VNet1's custom DNS server address to DC1.

04. An Azure Private DNS zone named fabrikam.com is linked to VNet1, and automatic registration maintains records for the virtual machines in VNet1. You add a link named Link2 for VNet2, but records for the VNet2 virtual machines do not appear in the zone.

You need Azure to maintain the VNet2 virtual-machine records with minimal administration. What should you do?
a) Manually enter the DNS records for the virtual machines in VNet2.

b) Add a hosts file to each virtual machine in VNet2.

c) Enable automatic registration on Link2.

d) Create a second private DNS zone and add Link2.

05. You are creating Virtual WAN hub VHub1. The hub will later host site-to-site, point-to-site, and ExpressRoute gateways. From the available choices, you need the smallest supported CIDR prefix for the hub private address space.
a) /32

b) /24

c) /29

d) /25

06. VNet1 has address space 10.0.0.0/23 and four existing subnets. Only one /27 block remains unallocated. You plan to deploy Azure Firewall in VNet1 while minimizing administrative effort and cost. What should you do first?
a) Create AzureFirewallSubnet from the remaining /27.

b) Increase the address space of VNet1.

c) Deploy a third-party firewall in the /27.

d) Create a new virtual network and peer it with VNet1.

07. A subscription contains VNet1 in West Europe, VNet2 in UK West, storage1 in West Europe, and SQL1 in UK West. You create private endpoint Private1 in West Europe. Which VNet can host it, and which listed resources can it target?
a) VNet1; either storage1 or SQL1

b) VNet2; SQL1 only

c) VNet1; storage1 only

d) VNet1 or VNet2; either storage1 or SQL1

08. Two subnets contain ten VMs. You will add user-defined routes so all internet-bound traffic uses a Microsoft-managed stateful firewall for inspection. Which service should be the routes' next-hop security resource?
a) ExpressRoute

b) Azure Firewall

c) Azure Application Gateway

d) Azure Front Door

09. Your subscription contains VNet1 and VNet2 with non-overlapping address spaces. Resources in the two virtual networks must communicate privately by using Microsoft's backbone, without deploying a gateway. What should you configure?
a) ExpressRoute

b) Azure Traffic Manager

c) Azure NAT Gateway

d) Virtual network peering

10. VNet1 has site-to-site VPN connections to offices in Seattle, Los Angeles, and Boston. All internet-bound traffic from VNet1 must traverse the Boston VPN connection for inspection. Which two actions are required to configure forced tunneling by using a default site?

Each correct answer presents part of the solution.

a) Configure the Boston local network gateway as the default site for VPNGateway1.

b) Create a route table with 0.0.0.0/0 and an Internet next hop.

c) Associate a NAT gateway with every VNet1 subnet.

d) Enable BGP on every site-to-site VPN connection.

e) Configure the Boston VPN device to use 0.0.0.0/0 as a traffic selector.

Answers:

Question: 01 Answer: a	Question: 02 Answer: b, c, e	Question: 03 Answer: d	Question: 04 Answer: c	Question: 05 Answer: b
Question: 06 Answer: b	Question: 07 Answer: a	Question: 08 Answer: b	Question: 09 Answer: d	Question: 10 Answer: a, e

Note: For any error in Microsoft Certified - Azure Network Engineer Associate (AZ-700) certification exam sample questions, please update us by writing an email on feedback@edusum.com.