Valid AZ-700 Dumps shared by PassLeader for Helping Passing AZ-700 Exam! PassLeader now offer the newest AZ-700 VCE dumps and AZ-700 PDF dumps, the PassLeader AZ-700 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader AZ-700 dumps with VCE and PDF here: https://www.passleader.com/az-700.html (217 Q&As Dumps –> 276 Q&As Dumps)
BTW, DOWNLOAD part of PassLeader AZ-700 dumps from Cloud Storage: https://drive.google.com/drive/folders/11GBu3Jq_EWsF2NUi__ZcspE_oTcAzPym
NEW QUESTION 184
You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2.
Solution: You resize the gateway of Vnet1 to a larger SKU.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing
NEW QUESTION 185
You have a hub-and-spoke topology. The topology includes multiple on-premises locations that connect to a hub virtual network in Azure via ExpressRoute circuits. You have an Azure Application Gateway named GW1 that provides a single point of ingress from the internet. You plan to migrate the hub-and-spoke topology to Azure Virtual WAN. You need to identify which changes must be applied to the existing topology. The solution must ensure that you maintain a single point of ingress from the internet. Which three changes should you include in the solution? (Each correct answer presents part of the solution. Choose three.)
A. Add user-defined routes.
B. Add virtual network peerings.
C. Replace the user-defined routes used by the current topology.
D. Create virtual network connections.
E. Remove the existing virtual network peerings.
F. Redeploy GW1.
Answer: CDE
Explanation:
Transition connectivity to virtual WAN hub:
Step 1. (E) Delete the existing peering connections from Spoke virtual networks to the old customer-managed hub. Access to applications in spoke virtual networks is unavailable until steps 1-3 are complete.
Step 2. (D) Connect the spoke virtual networks to the Virtual WAN hub via VNet connections.
Step 3. (C) Remove any user-defined routes (UDR) previously used within spoke virtual networks for spoke-to-spoke communications. This path is now enabled by dynamic routing available within the Virtual WAN hub.
https://docs.microsoft.com/en-us/azure/virtual-wan/migrate-from-hub-spoke-topology
NEW QUESTION 186
You have an Azure subscription that contains a user named Admin1 and a resource group named RG1. RG1 contains an Azure Network Watcher instance named NW1. You need to ensure that Admin1 can place a lock on NW1. The solution must use the principle of least privilege. Which role should you assign to Admin1?
A. User Access Administrator
B. Network Contributor
C. Resource Policy Contributor
D. Monitoring Contributor
Answer: B
NEW QUESTION 187
You need to use Traffic Analytics to monitor the usage of applications deployed to Azure virtual machines. Which Azure Network Watcher feature should you implement first?
A. Connection monitor.
B. Packet capture.
C. NSG flow logs.
D. IP flow verify.
Answer: A
NEW QUESTION 188
You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?
A. internal load balancers
B. storage account
C. service endpoints
D. service endpoint policies
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview
NEW QUESTION 189
You have an Azure virtual network named Vnet1 that hosts an Azure firewall named FW1 and 150 virtual machines. Vnet1 is linked to a private DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone. Vnet1 connects to an on-premises datacenter by using ExpressRoute. You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)
A. Modify the DNS server settings of Vnet1.
B. For FW1, configure custom DNS server.
C. For FW1, enable DNS proxy.
D. On the on-premises DNS servers, configure forwarders that point to the frontend IP address of FW1.
E. On the on-premises DNS servers, configure forwarders that point to the Azure provided DNS service at 168.63.129.16.
Answer: CD
Explanation:
https://docs.microsoft.com/en-us/azure/private-link/private-endpoint-dns#on-premises-workloads-using-a-dns-forwarder
https://azure.microsoft.com/en-gb/blog/new-enhanced-dns-features-in-azure-firewall-now-generally-available/
NEW QUESTION 190
You can get the current service tag and range information by downloading the JSON file or programmatically adding it as part of your on-premises firewall configuration. Which of the following can be used to programmatically retrieve the current list of service tags?
A. REST.
B. Azure PowerShell.
C. Azure CLI.
D. All of these.
Answer: D
NEW QUESTION 191
Azure Private Endpoint acts as a network interface to connect you to a service powered by Azure Private Link in a private and secure manner. Being the Private Link resource owner, which of the following actions can you perform over a private endpoint connection?
A. Reviewing all private endpoint connection details.
B. Approving a private endpoint connection.
C. Rejecting a private endpoint connection.
D. Deleting a private endpoint connection from any state.
E. All the above.
Answer: E
NEW QUESTION 192
You need to configure a security policy. As a process, first you find the name for the resource group containing Front Door profile with the help of Get-AzResourceGroup. Now, which of the following cmdlet would you use to configure a security policy in the identified resource group?
A. New-AzFrontDoorWafPolicy
B. Set-AzFrontDoorWafPolicy
C. New-AzFrontDoorPolicry
D. New-AzureFrontDoorWafPolicy
Answer: A
NEW QUESTION 193
Virtual Network NAT (Network Address Translation) eases outbound-only Internet connectivity for virtual networks. Which of the following statement(s) are true about NAT? (Choose two.)
A. NAT has compatibility with standard SKU public IP and public IP prefix but not with load balancer resources.
B. NAT supports both IPv4 and IPv6 addresses.
C. NAT supports only IPv4 not IPv6.
D. NAT can span a number of virtual networks.
E. NAT can’t span many virtual networks.
Answer: CE
NEW QUESTION 194
There are 6 traffic-routing methods in Azure Traffic Manager to control network traffic routing to the different service endpoints. Which Traffic manager routing method would you use when you are having endpoints in various geographic locations and you want to ensure that end users utilize the “closest” endpoint for the lowest network latency?
A. Priority
B. Network
C. Performance
D. Singlevalue
E. Weighted
Answer: C
NEW QUESTION 195
You are the team leader and you are addressing your team about the load balancing and various Azure load balancing services. Which of the following statements would you use to describe the Azure Front Door load balancing service?
A. A DNS-based traffic load balancing service that allows optimal distribution of the traffic to services across global Azure regions, offering high responsiveness and availability.
B. Load balancing option that offers application delivery controller (ADC) as a service, supporting different Layer 7 load balancing capabilities.
C. A high-performance and ultra low-latency Layer 4 load balancing service (inbound & outbound) for all TCP and UDP protocols.
D. An application delivery network that offers global load balancing and site acceleration services for web applications with its layer 7 capabilities.
Answer: D
NEW QUESTION 196
You can use Virtual network peering to seamlessly connect 2 or more Virtual Networks in Azure. Which of the following benefits would you get using the virtual network peering? (Choose three.)
A. A high-bandwidth, low-latency connection between the resources in various virtual networks.
B. A high-bandwidth, high-latency connection between the resources in various virtual networks.
C. Significant downtime to resources in either virtual networks while developing the peering, or after the peering is developed.
D. The ability to peer virtual networks created through the Azure Resource Manager.
E. The capability for resources in a virtual network to communicate with resources in another virtual network.
Answer: ADE
Explanation:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
NEW QUESTION 197
HotSpot
FirewallPolicy1 contains the following rules:
– Allow outbound traffic from Vnet1 and Vnet2 to the internet.
– Allow any traffic between Vnet1 and Vnet2.
No custom private endpoints, service endpoints, routing tables, or network security groups (NSGs) were created. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
NEW QUESTION 198
Drag and Drop
You have three on-premises sites. Each site has a third-party VPN device. You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-to-Site VPN connection. You need to connect the third site to the other two sites by using Hub1. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-site-to-site-portal
NEW QUESTION 199
HotSpot
You have the Azure resources shown in the following table:
WebApp1 uses the Standard pricing tier. You need to ensure that WebApp1 can access the virtual machines deployed to Vnet1\Subnet1 and Vnet2\Subnet1. The solution must minimize costs. What should you create in each virtual network? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
Box 1: An additional subnet. Regional virtual network integration: When you connect to virtual networks in the same region, you must have a dedicated subnet in the virtual network you’re integrating with.
Box 2: A VPN gateway. Gateway-required virtual network integration: When you connect directly to virtual networks in other regions or to a classic virtual network in the same region, you need an Azure Virtual Network gateway created in the target virtual network. Note: If your app is in an App Service Environment, it’s already in a virtual network and doesn’t require use of the VNet integration feature to reach resources in the same virtual network.
https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration
NEW QUESTION 200
Drag and Drop
You register a DNS domain with a third-party registrar. You need to host the DNS zone on Azure. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns
NEW QUESTION 201
……
Get the newest PassLeader AZ-700 VCE dumps here: https://www.passleader.com/az-700.html (217 Q&As Dumps –> 276 Q&As Dumps)
And, DOWNLOAD the newest PassLeader AZ-700 PDF dumps from Cloud Storage for free: https://drive.google.com/drive/folders/11GBu3Jq_EWsF2NUi__ZcspE_oTcAzPym