AZ-700 PREP

You have an Azure virtual network and an on-premises datacenter. You are planning a Site-to-Site VPN connection between the datacenter and the virtual network. Which two resources should you include in your plan? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. an Azure application gateway

• B. a virtual network gateway

• C. Azure Firewall

• D. a local network gatew

• E. an on-premises data gatewayay

Your company has offices in New York and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-toSite VPN connection. The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region. You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises servers in the New York office by using the ExpressRoute circuits. Which ExpressRoute option should you use?

• A. ExpressRoute FastPath

• B. ExpressRoute Global Reach

• C. ExpressRoute Direct

• D. ExpressRoute Local

You have an Azure subscription that contains a virtual network. You plan to deploy an Azure VPN gateway and 90 Site-to-Site VPN connections. The solution must meet the following requirements: • Ensure that the Site-to-Site VPN connections remain available if an Azure datacenter fails. • Minimize costs. Which gateway SKU should you specify?

• A. VpnGw1AZ

• B. VpnGw2AZ

• C. VpnGw4AZ

• D. VpnGw5AZ

You need to ensure that the applications hosted on the virtual machines can be accessed from the internet. The solution must ensure that the virtual machines share a single public IP address.What should you use?

• A. an internal load balancer

• B. Azure Application Gateway

• C. a NAT gateway

• D. a public load balancer

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks. You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub. You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution. What should you include in the solution?

• A. An Azure Virtual WAN ExpressRoute gateway

• B. A Network Virtual Appliance (NVA)

• C. A Site to site gateway (VPN gateway)

• D. A Point to site gateway (User VPN gateway)

You have an on-premises datacenter and an Azure subscription. You plan to implement ExpressRoute FastPath. You need to create an ExpressRoute gateway. The solution must minimize downtime if a single Azure datacenter fails. Which SKU should you use?

• A. ErGw1AZ

• B. High performance

• C. Ultra performance

• D. ErGw3AZ E. ErGw2AZ

You have an Azure subscription that contains an ExpressRoute Standard gateway named GW1. You need to upgrade GW1 to support ExpressRoute FastPath. The solution must minimize downtime. Which SKU should you use?

• A. Ultra performance

• B. ErGw3AZ

• C. ErGw2AZ

• D. High performance

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You reset the gateway of Vnet1. Does this meet the goal?

• A. Yes

• B. No

You plan to deploy Azure virtual network. You need to design the subnets. Which three types of resources require a dedicated subnet? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A. Azure Bastion

• B. Azure Active Directory Domain Services (Azure AD DS)

• C. Azure Private Link

• D. Azure Application Gateway v2

• E. VPN gateway

You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone. Vnet1 connects to an on-premises datacenter by using ExpressRoute. You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

• A. Modify the DNS server settings of Vnet1.

• B. For FW1, configure custom DNS server.

• C. For FW1, enable DNS proxy.

• D. On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.

• E. On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.