Question No : 1
You have an Azure subscription that contains the resources shown in the following table.



Subshell contains Three virtual machines that host an app named App1. App1 is accessed by using the SFTP protocol.
From NSG1. you configure an inbound security rule named Rule2 that allows inbound SFTP connections to ASG1.
You need to ensure that the inbound SFTP connections are managed by using ASG1. The solution must minimize administrative effort.
What should you do?

• A.From NSG1. modify the priority of Rule2.
• B.From each virtual machine, associate the network interface to ASG1
• C.From Subnet1 create a subnet delegation.
• D.From ASG1, modify the role assignments.

Show Answers

Answer:

Question No : 2
Your company has a single on-premises datacenter in New York. The East US Azure region has a peering location in New York.
The company only has Azure resources in the East US region.
You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs.
Which type of ExpressRoute circuits should you create?

• A.ExpressRoute Local
• B.ExpressRoute Direct
• C.ExpressRoute Premium
• D.ExpressRoute Standard

Show Answers

Answer:
Explanation:
Reference: https://azure.microsoft.com/en-us/pricing/details/expressroute/

Question No : 3
HOTSPOT
You are planning an Azure Front Door deployment that will contain the resources shown in the following table.



Users will connect to the App Service through Front Door by using a URL of https://www.fabrikarn.com. You obtain a certificate for the host name ofwww.fabfikam.com.
You need to configure a DNS record for www.fabrikam.com and upload the certificate to Azure.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Show Answers

Answer:

Question No : 4
You have an Azure virtual network that contains the subnets shown in the following table.



You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall.
You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com.
What should you do?

• A.Create a network security group (NSG) and associate the NSG to Subnet2.
• B.In a firewall policy, create an application rule.
• C.In a firewall policy, create a DNAT rule.
• D.In a firewall policy, create a network rule.

Show Answers

Answer:

Question No : 5
You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.
Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A.On the peerings from Vnet2 and Vnet3, select Use remote gateways.
• B.On the peering from Vnet1, select Allow forwarded traffic.
• C.On the peering from Vnet1, select Use remote gateways.
• D.On the peering from Vnet1, select Allow gateway transit.
• E.On the peerings from Vnet2 and Vnet3, select Allow gateway transit.

Show Answers

Answer:

Question No : 6
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?

• A.a private endpoint
• B.a virtual network peering
• C.a private link service
• D.a routing table
• E.a service endpoint

Show Answers

Answer:
Explanation:
There is no virtual network peering between VM4’s VNet (VNet3) and VM5’s VNet (VNet4). To enable the VMs to communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4.

Question No : 7
You have an Azure subscription that contains the virtual networks shown in the following table.



You plan to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.
To which virtual networks can you deploy AF1?

• A.Vnet1 only
• B.Vnet1 and Vnet2 only
• C.Vnet1, Vnet2, and Vnet4 only
• D.Vnet1 and Vnet4 only
• E.Vnet1, Vnet2. Vnet3, and Vnet4

Show Answers

Answer:

Question No : 8
Azure virtual networks in the East US Azure region as shown in the following table.



The virtual networks are peered to one another. Each virtual network contains four subnets.
You plan to deploy a virtual machine named VM1 that will inspect and route traffic between all the subnets on both the virtual networks.
What is the minimum number of IP addresses that you must assign to VM1?

• A.1
• B.2
• C.4
• D.8

Show Answers

Answer:

Question No : 9
HOTSPOT
You are implementing the virtual network requirements for VM Analyze.
What should you include in a custom route that is linked to Subnet2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Show Answers

Answer:


Explanation:
Graphical user interface, text, application
Description automatically generated

Question No : 10
HOTSPOT
You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.
What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Show Answers

Answer:


Explanation:
Graphical user interface, text, application
Description automatically generated
Box 2: One NSG
The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.
Box 1: Two custom rules
With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.
The default rules in the NSG will allow all other traffic to VMScaleSet2.