Latest Dec 07, 2025 AZ-700 Brain Dump: A Study Guide with Tips & Tricks for passing Exam
AZ-700 Question Bank: Free PDF Download Recently Updated Questions
NEW QUESTION # 120
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?
- A. a private endpoint
- B. a routing table
- C. a private link service
- D. a service endpoint
- E. a virtual network peering
Answer: E
Explanation:
Explanation
There is no virtual network peering between VM4's VNet (VNet3) and VM's VNet (VNet4). To enable the VMs to communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4.
NEW QUESTION # 121
You have three on-premises sites. Each site has a third-party VPN device.
You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-to-Site VPN connection.
You need to connect the third site to the other two sites by using Hub1.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Table Description automatically generated
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-site-to-site-portal
NEW QUESTION # 122
You have an Azure subscription that contains the route tables and routes shown in the following table.
The subscription contains the subnets shown in the following table.
The subscription contains the virtual machines shown in the following table.
There is a Site-to-Site VPN connection to each local network gateway.
For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
A screenshot of a computer Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
NEW QUESTION # 123
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You enable BGP on the gateway of Vnet1.
Does this meet the goal?
- A. Yes
- B. No
Answer: B
Explanation:
Explanation
The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
NEW QUESTION # 124
You need to use Traffic Analytics to monitor the usage of applications deployed to Azure virtual machines.
Which Azure Network Watcher feature should you implement first?
- A. NSG flow logs
- B. IP flow verify
- C. Packet capture
- D. Connection monitor
Answer: A
Explanation:
Traffic analytics examines raw NSG flow logs. It then reduces the log volume by aggregating flows that have a common source IP address, destination IP address, destination port, and protocol.
Reduced logs are enhanced with geography, security, and topology information and then stored in a Log Analytics workspace.\
https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics
NEW QUESTION # 125
You have an Azure subscription that contains an Azure App Service app. The app uses a URL of
https://www.contoso.com.
You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA).
What should you include in the solution?
- A. Azure Key Vault
- B. Azure Application Gateway
- C. an enterprise application in Azure Active Directory (Azure AD)
- D. Active Directory Certificate Services (AD CS)
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain-https
NEW QUESTION # 126
You have two Azure subscriptions named Subscnption1 and Subscription2. Subscription1 contains a virtual network named Vnet1. Vnet1 contains an application server. Subscription2 contains a virtual network named Vnet2.
You need to provide the virtual machines in Vnet2 with access to the application server in Vnet1 by using a private endpoint.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 127
You are implementing the virtual network requirements for VM Analyze.
What should you include in a custom route that is linked to Subnet2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
NEW QUESTION # 128
You have an Azure Front Door instance named FrontDoor1.
You deploy two instances of an Azure web app to different Azure regions.
You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.
You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Add a custom domain to FrontDoor1.
2 - Add a PTR record to DNS.
3 - Add a rules engine configurations to FrontDoor1.
NEW QUESTION # 129
You have an Azure subscription that contains the virtual networks.shown in the following table.
You have a virtual machine named VM5 that has the following IP address configurations:
* IP address: 10.4.0.5
* Subnet mask:255.255.255.0
* Default gateway:10.4.0.1
* DNSserver:168.63.129.16
You have an Azure Private DNS zone named, fabrikam.com that contains the records shown in, the following table.
The virtual network links in the fabrikam.com DNS /one are configured as shown in the exhibit. (Click the Exhibit tab.) VMS fails to resolve the IP address for.appKfabrik3in.com.
For each of the following statements, select Yes if, the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 130
Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: VM2, VM3 and VM4.
VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3.
There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocking inbound ICMP to VNet1/Subnet2, VNet2 or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3.
Box 2:
VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2.
NEW QUESTION # 131
You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.
What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 2: One NSG
The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.
Box 1: Two custom rules
With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.
The default rules in the NSG will allow all other traffic to VMScaleSet2.
NEW QUESTION # 132
You have an Azure subscription that contains an Azure Firewall policy named FWPolicy1. You need to configure FWPolicy1 to meet the following requirements
* Allow traffic based on the FQDN of the destination.
* Allow TCP traffic based on the source.
Which types of rules should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 133
You have an Azure Front Door instance named FD that contains an origin group named OG1.
You need to configure a health probe for OG1. The solution must minimize the amount of traffic generated by the health probe.
Which HTTP method should you use?
- A. HEAD
- B. TRACE
- C. GET
- D. CONNECT
Answer: A
Explanation:
Azure Front Door supports the following HTTP methods for sending the health probes:
GET: The GET method means retrieve whatever information (in the form of an entity) gets identified by the Request-URI.
HEAD: The HEAD method is identical to GET except that the server MUST NOT return a message-body in the response. For new Front Door profiles, by default, the probe method is set as HEAD.
https://learn.microsoft.com/en-us/azure/frontdoor/health-probes
NEW QUESTION # 134
You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements.
What should you use to configure the default route?
- A. BGP route exchange
- B. route filters
- C. a user-defined route assigned to GatewaySubnet in Vnet2 and Vnet3
- D. a user-defined route assigned to GatewaySubnet in Vnet1
Answer: A
Explanation:
Explanation
VNet 1 will get the default from BGP and propagate it to VNET 2 and 3
NEW QUESTION # 135
You have an Azure subscription that contains an Azure application gateway named AG1 and two Azure App Service apps named App1 and App2 that have the following configurations:
* Both apps are accessible by using HTTP and HTTPS.
* HTTP host headers are used to route requests to the appropriate apps.
* Both apps are hosted in a single App Service Environment in the West Europe Azure region.
You need to publish the apps by using AG1. The solution must ensure that AG1 provides both HTTP and HTTPS access.
What is the minimum number of resources required for AG1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 136
You have an Azure subscription. The subscription contains virtual machines that host websites as shown in the following table.
You have the Azure Traffic Manager profiles shown in the following table.
You have the endpoints shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise select No.
NOTE: Each connect selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 137
You have an Azure subscription that contains two virtual networks named VNet1 and VNet2.
You plan to deploy the resources shown in the following table.
You need to deploy two load balancers to manage the traffic for VMSS1, VM1. and VM2. The solution must meet the following requirements:
* Either VM1 or VM2 must inspect all the traffic from the internet to App1.
* All user connections from the internet to App1 must be load balanced.
* Costs must be minimized.
Which load balancer SKU should you include in the solution? To answer, drag the appropriate SKUs to the correct resources. Each SKU may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
Answer:
Explanation:
Explanation:
NEW QUESTION # 138
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
* Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection
* Supports 8 Gbps of ExpressRoute traffic
* Minimizes costs
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Graphical user interface, diagram Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
NEW QUESTION # 139
Hotspot Question
You have two Azure App Service instances that host the web apps shown the following table.
You deploy an Azure 2 that has one public frontend IP address and two backend pools.
You need to publish all the web apps to the application gateway. Requests must be routed based on the HTTP host headers.
What is the minimum number of listeners and routing rules you should configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: 2
1 Multi site Listener mapping each backend app service (total 2).
Box 2: 2
1 routing rule mapping per listener/backend pool with Multi site option (total 2)
NEW QUESTION # 140
You have an Azure subscription that contains a virtual network named VNet1 and the virtual machines shown in the following table.
All the virtual machines are connected to VNet1.
You need to ensure that the applications hosted on the virtual machines can be accessed from the internet. The solution must ensure that the virtual machines share a single public IP address What should you use?
- A. an internal load balancer
- B. a public load balancer
- C. a NAT gateway
- D. Azure Application Gateway
Answer: B
NEW QUESTION # 141
You have an Azure subscription that contains the resources shown in the following table.
You need to associate Gateway 1 with Subnet1. The solution must minimize downtime on VM1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Disassociate PIP1 from NIC1.
2 - Change Assignment to Dynamic for PIP1.
3 - Associate PIP1 to NIC1.
NEW QUESTION # 142
You have an Azure subscription that contains the following resources:
* A virtual network named Vnet1
* Two subnets named subnet1 and AzureFirewallSubnet
* A public Azure Firewall named FW1
* A route table named RT1 that is associated to Subnet1
* A rule routing of 0.0.0.0/0 to FW1 in RT1
After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.
You need to ensure that the virtual machines can be activated.
What should you do?
- A. On FW1, create an outbound service tag rule for AzureCloud.
- B. Deploy a NAT gateway.
- C. To Subnetl, associate a network security group (NSG) that allows outbound access to port 1688.
- D. On FW1, create an outbound network rule that allows traffic to the Azure Key Management Service (KMS).
Answer: D
Explanation:
Reference:
https://ryanmangansitblog.com/2020/05/11/firewall-considerations-windows-virtual-desktop-wvd/
NEW QUESTION # 143
You have an Azure private DNS zone named contoso.com that is linked to the virtual networks shown in the following table.
The links have auto registration enabled.
You create the virtual machines shown in the following table.
You manually add the following entry to the contoso.com zone:
Name: VM1
IP address: 10.1.10.9
For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/dns/dns-faq-private
NEW QUESTION # 144
Your on-premises network contains an Active Directory Domain Services {AD DS) domain named contoso.com that has an internal certification authority (CA).
You have an Azure subscription.
You deploy an Azure application gateway named AppGwy1 and perform the following actions:
* Configure an HTTP listener.
* Associate a routing rule with the listener.
You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 145
......
The Azure networking solutions are complex and require a deep understanding of networking principles and cloud computing. The Microsoft AZ-700 certification exam is designed to test the knowledge and skills required for designing and implementing Azure networking solutions. Designing and Implementing Microsoft Azure Networking Solutions certification demonstrates the IT professional's ability to design and implement secure and efficient networking solutions using Microsoft Azure. Designing and Implementing Microsoft Azure Networking Solutions certification exam is ideal for IT professionals who want to enhance their skills in Azure networking and elevate their career prospects.
Microsoft AZ-700 is an exam designed for professionals who are seeking to validate their skills and knowledge in designing and implementing Microsoft Azure networking solutions. Designing and Implementing Microsoft Azure Networking Solutions certification exam assesses the candidates' abilities to configure and manage Azure virtual networks, secure network connections, and implement hybrid connectivity solutions.
New AZ-700 Exam Dumps with High Passing Rate: https://www.freecram.com/Microsoft-certification/AZ-700-exam-dumps.html
AZ-700 Certification Exam Dumps with 398 Practice Test Questions: https://drive.google.com/open?id=13s6eZHqzBytcwUD1-msvVGVSKebU6Q26