Valid AZ-700 Dumps shared by ExamDiscuss.com for Helping Passing AZ-700 Exam! ExamDiscuss.com now offer the newest AZ-700 exam dumps, the ExamDiscuss.com AZ-700 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com AZ-700 dumps with Test Engine here:
Access AZ-700 Dumps Premium Version
(398 Q&As Dumps, 35%OFF Special Discount Code: freecram)
Online Access Free AZ-700 Exam Questions
| Exam Code: | AZ-700 |
| Exam Name: | Designing and Implementing Microsoft Azure Networking Solutions |
| Certification Provider: | Microsoft |
| Free Question Number: | 77 |
| Version: | v2024-03-15 |
| Rating: | |
| # of views: | 629 |
| # of Questions views: | 7639 |
| Go To AZ-700 Questions | |
Recent Comments (The most recent comments are at the top.)
No.# Well, after reviewing more, I think I was premature in saying the answer was 100% C. I was 100% wrong!! The correct answer is absolutely, 100% A. User Access Administrator
The key to the questions is that we're being asked what permissions are required to place a __lock__ (resource lock) on the Network Watcher resource. To create or delete management locks, you need access to Microsoft.Authorization/* or Microsoft.Authorization/locks/* actions. Only the Owner and the User Access Administrator built-in roles can create and delete management locks. You can create a custom role with the required permissions.
Source:
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json#who-can-create-or-delete-locks
No.# A. Network Contributor
No.# D. a private DNS zone named privatelink.database.windows.net
No.# typo* its 200 - 300 -100
No.# 200 - 100 - 300
No.# The correct answer is B. an outbound rule that has a priority 100 and blocks all internet traffic.
Explanation:
To ensure that the Azure Application Gateway v2 (AppGw1) will only load balance traffic that originates from VNet1, you need to add an outbound rule to the network security group (NSG1) that is linked to Subnet1.
The key requirements are:
1. The solution must minimize the impact on the functionality of AppGw1.
2. The traffic that needs to be allowed is the traffic originating from VNet1.
By adding an outbound rule with a priority of 100 that blocks all internet traffic, you can achieve the desired result without impacting the functionality of AppGw1.
Here's the reasoning:
- The Application Gateway needs to be able to send traffic to the internet to load balance the traffic to the backend pools. If you block all outbound traffic, it will break the functionality of the Application Gateway.
- By adding the outbound rule with a priority of 100, it will be processed before the default "DenyAllOutbound" rule, which has a priority of 65500. This ensures that the traffic originating from VNet1 is allowed to pass through, while all other outbound traffic is blocked.
The other options are not correct:
A. An inbound rule that blocks all internet traffic would not be the correct solution, as the Application Gateway needs to receive inbound traffic from the internet.
C. An outbound rule with a priority of 4096 would be processed after the default "DenyAllOutbound" rule, which has a higher priority, and would not achieve the desired result.
D. An inbound rule with a priority of 4096 that blocks all internet traffic would not be the correct solution, as it would not address the requirement to allow traffic originating from VNet1....
No.# To create a rewrite rule that will remove the origin port from the HTTP header of incoming requests that are being forwarded to the backend pool, you should configure the following settings:
Common header: X-Forwarded-For
Header value: add_x_forwarded_for_proxy
Explanation:
The "X-Forwarded-For" header is commonly used to identify the original host or IP address of a client when using a proxy, load balancer, or other intermediary device. This header is often used to preserve the client's IP address information when the request is forwarded to the backend.
In this case, you need to remove the origin port from the incoming requests, so you should configure the rewrite rule to use the "add_x_forwarded_for_proxy" option for the "Header value" setting. This will add the client's IP address and port information to the "X-Forwarded-For" header, but without including the origin port.
The other options are not correct:
- "Via" or "X-Forwarded-Host" are not the appropriate "Common header" settings for this use case.
- "client_port" or "host" are not the appropriate "Header value" settings for removing the origin port from the HTTP header....
No.# 's correct.
To blob storage account or to VM's valid path.
Storage account or file: Select Storage account, File, or both. If you select File, the capture is written to a path within the virtual machine.
Local file path: The local path on the virtual machine where the packet capture will be saved (valid only when File is selected). The path must be a valid path. If you are using a Linux virtual machine, the path must start with /var/captures.
Storage accounts: Select an existing storage account, if you selected Storage account. This option is only available if you selected Storage.
No.# 1. Delete VPN GW1.
2. Set the subnet mask of Gateway Subnet to /27.
3. Create a VPN gateway by using the VPN GW1 SKU.
Basic VPN Gateway does not support P2S.
If the gateway subnet is /29, you've to first delete the virtual network gateway and increase the gateway subnet size.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
https://docs.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal
No.# YYY / tested in lab
VM1 and VM5 can communicate.
'Traffic to remove virtual network : Block' setting in Vnet5 does not block communication between VM5 and GW4, while it blocks communication between VM5 and VM4.