The latest Lead4Pass AZ-700 dumps contain 116 exam questions and answers, and a 15% discount promo code “Microsoft”, to help all candidates save more and successfully pass the AZ-700 Designing and Implementing Microsoft Azure Networking Solutions certification exam.
Download the latest AZ-700 dumps: https://www.leads4pass.com/az-700.html, study easily with PDF and VCE exam simulation tools to help you achieve your ultimate goal.
And, some AZ-700 dumps pdf are available for free download
https://drive.google.com/file/d/1Wu0mOAnuH5xQVbtvl-ITT6wlkE1pYNAa/
https://drive.google.com/file/d/1EqmEAqs0mVDcBds02n8Rg8dh72qcqe82/
You can also read some latest AZ-700 dumps exam questions and answers online
| Number of exam questions | Exam name | From | Release time | Last updated |
| 15 | Designing and Implementing Microsoft Azure Networking Solutions | Lead4Pass | Dec 07, 2022 | AZ-700 dumps |
New Question 1:
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You download and reinstall the VPN client configuration.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
New Question 2:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: No
Zone2.contoso.com is not linked to any virtual networks. Therefore, no VMs are able to resolve names in the zone.
Box 2: Yes
VM4 is in VNet3. Zone1.contoso.com has a link to VNet3 and auto-registration is enabled on the link.
Box3: No
VNet3 is linked to zone1.contoso.com and auto-registration is enabled on the link. A virtual network can only have one registration zone. You can link zone2.contoso.com to VNet3 but you won’t be able to enable auto-registration on the link.
New Question 3:
You need to configure the default route on Vnet2 and Vnet3. The solution must meet the virtual networking requirements. What should you use to configure the default route?
A. route filters
B. BGP route exchange
C. a user-defined route assigned to GatewaySubnet in Vnet1
D. a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
New Question 4:
HOTSPOT
Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: VM2, VM3 and VM4.
VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3.
There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocking inbound ICMP to VNet1/Subnet2, VNet2, or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3.
Box 2:
VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks
inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2.
New Question 5:
HOTSPOT
You have an Azure Traffic Manager parent profile named TM1. TM1 has two child profiles named TM2 and TM3.
TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.
TM2 uses the weighted traffic-routing method with MinChildEndpoint = 2 and has the endpoints shown in the following table.
TM3 uses the priority traffic-routing method and has the endpoints shown in the following table.
The App2, App4, and App6 endpoints have a degraded monitoring status.
To which endpoint is traffic directed? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-nested-profiles
New Question 6:
HOTSPOT
You have the network topology shown in the Topology exhibit. (Click the Topology tab.)
You have the Azure firewall shown in the Firewall 1 exhibit. (Click the Firewall tab.)
You have the routing table shown in the RouteTable1 exhibit. (Click the RouteTable1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
New Question 7:
You fail to establish a Site-to-Site VPN connection between your company\’s main office and an Azure virtual network.
You need to troubleshoot what prevents you from establishing the IPsec tunnel.
Which diagnostic log should you review?
A. IKEDiagnosticLog
B. RouteDiagnosticLog
C. GatewayDiagnosticLog
D. TunnelDiagnosticLog
Correct Answer: A
IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to review when troubleshooting disconnections, or failure to connect VPN scenarios.
GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table.
TunnelDiagnosticLog = The TunnelDiagnosticLog table is very useful to inspect the historical connectivity statuses of the tunnel.
RouteDiagnosticLog = The RouteDiagnosticLog table traces the activity for statically modified routes or routes received via BGP.
P2SDiagnosticLog = The last available table for VPN diagnostics is P2SDiagnosticLog. This table traces the activity for Point to Site.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics
New Question 8:
HOTSPOT
You have the Azure environment shown in the exhibit.
You have a virtual network peering between Vnet1 and Vnet2. You have a virtual network peering between Vnet4 and Vnet5. The virtual network peering is configured as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
New Question 9:
HOTSPOT
You have two Azure App Service instances that host the web apps shown in the following table.
You deploy an Azure application gateway that has one public frontend IP address and two backend pools.
You need to publish all the web apps to the application gateway. Requests must be routed based on the HTTP host headers.
What is the minimum number of listeners and routing rules you should configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
New Question 10:
Your company has offices in New York and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-to-Site VPN connection.
The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region.
You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises
servers in the New York office by using the ExpressRoute circuits.
Which ExpressRoute option should you use?
A. ExpressRoute FastPath
B. ExpressRoute Global Reach
C. ExpressRoute Direct
D. ExpressRoute Local
Correct Answer: D
Reference: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-global-reach
New Question 11:
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
New Question 12:
HOTSPOT You have an Azure application gateway named AppGW1 that provides access to the following hosts: www.adatum.com
www.contoso.com www.fabrikam.com AppGW1 has the listeners shown in the following table.
You create Azure Web Application Firewall (WAF) policies for AppGW1 as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies
New Question 13:
HOTSPOT
You need to recommend a configuration for the ExpressRoute connection from the Boston data center. The solution must meet the hybrid networking requirements and business requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
For the first question, only ExpressRoute GW SKU Ultra Performance supports the FastPath feature.
For the second question, vnet1 will connect to ExpressRoute gw, once Vnet1 peers with Vnet2, the traffic from on-premise network will bypass GW and Vnet1, and directly goes to Vnet2, while this feature is under public preview.
====Reference ExpressRoute virtual network gateway is designed to exchange network routes and route network traffic. FastPath is designed to improve the data path performance between your on-premises network and your virtual network. When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway. To configure FastPath, the virtual network gateway must be either: Ultra Performance ErGw3AZ
VNet Peering – FastPath will send traffic directly to any VM deployed in a virtual network peered to the one connected to ExpressRoute, bypassing the ExpressRoute virtual network gateway. https://docs.microsoft.com/en-us/azure/expressroute/about-fastpath
Gateway SKU https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-networkgateways
New Question 14:
DRAG DROP
You have an Azure Front Door instance named FrontDoor1.
You deploy two instances of an Azure web app to different Azure regions.
You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.
You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door
New Question 15:
You plan to configure BGP for a Site-to-Site VPN connection between a data center and Azure.
Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)
NOTE: Each correct selection is worth one point.
A. a virtual network gateway
B. Azure Application Gateway
C. Azure Firewall
D. a local network gateway
E. Azure Front Door
Correct Answer: AD
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/bgp-howto
…
116 Lead4Pass az-700 dumps exam questions and answers verified by a team of Microsoft experts to be authentic and effective, candidates are welcome to use the az-700 dumps with PDF and VCE: https://www.leads4pass.com/az-700.html, Help you successfully pass the az-700 Designing and Implementing Microsoft Azure Networking Solutions certification exam in the shortest possible time.
BTW, get more AZ-700 dumps PDF exam materials for free:
https://drive.google.com/file/d/1Wu0mOAnuH5xQVbtvl-ITT6wlkE1pYNAa/
https://drive.google.com/file/d/1EqmEAqs0mVDcBds02n8Rg8dh72qcqe82/
