Lead4Pass AZ-700 dumps provide 110 latest updated exam questions and answers, while the actual exam questions are 40-60 questions, we can guarantee you more than 700 points in the actual exam.

You need to download AZ-700 dumps: https://www.leads4pass.com/az-700.html, use PDF and VCE study tools to help you practice 110 exam questions, help you save time, complete tasks easily, and 100% Get high scores.

PS. 365 days Free Update, It is equally effective for both starters and IT professionals.

The latest AZ-700 dumps PDF online sharing:https://drive.google.com/file/d/1Wu0mOAnuH5xQVbtvl-ITT6wlkE1pYNAa/

Try some Microsoft AZ-700 dumps exam questions online:

New Question 1:

HOTSPOT

You need to recommend a configuration for the ExpressRoute connection from the Boston data center.

The solution must meet the hybrid networking requirements and business requirements.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

For the first question, only ExpressRoute GW SKU Ultra Performance supports the FastPath feature.

For the second question, vnet1 will connect to ExpressRoute gw, once Vnet1 peers with Vnet2, the traffic from the on-premise network will bypass GW and Vnet1, and directly goes to Vnet2, while this feature is under public preview.

====Reference ExpressRoute virtual network gateway is designed to exchange network routes and route network traffic. FastPath is designed to improve the data path performance between your on-premises network and your virtual network.

When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.

To configure FastPath, the virtual network gateway must be either: Ultra Performance ErGw3AZ VNet Peering – FastPath will send traffic directly to any VM deployed in a virtual network peered to the one connected to ExpressRoute, bypassing the ExpressRoute virtual network gateway. https://docs.microsoft.com/en-us/azure/expressroute/about-fastpath
Gateway SKU https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-networkgateways

New Question 2:

You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?

A. internal load balancers
B. storage account
C. service endpoints
D. service endpoint policies

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

New Question 3:

DRAG DROP

You need to implement outbound connectivity for VMScaleSet1. The solution must meet the virtual networking requirements and the business requirements.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/load-balancer/skus
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-outbound-connections#outboundrules

New Question 4:

HOTSPOT You have an Azure application gateway named AppGW1 that provides access to the following hosts: www.adatum.com www.contoso.com www.fabrikam.com AppGW1 has the listeners shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/per-site-policies

New Question 5:

Your company has a single on-premises data center in New York. The East US Azure region has a peering location in New York.

The company only has Azure resources in the East US region.

You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans.

The solution must minimize costs.

Which type of ExpressRoute circuits should you create?

A. ExpressRoute Local
B. ExpressRoute Direct
C. ExpressRoute Premium
D. ExpressRoute Standard

Correct Answer: A

Reference: https://azure.microsoft.com/en-us/pricing/details/expressroute/

New Question 6:

You have the Azure environment shown in the exhibit.

VM1 is a virtual machine that has an instance-level public IP address (ILPIP).

Basic Load Balancer uses a public IP address. VM1 and VM2 are in the backend pool.

NAT Gateway uses a public IP address named IP3 that is associated to SubnetA.

VNet1 has a virtual network gateway that has a public IP address named IP4.

When initiating outbound traffic to the internet from VM1, which public address is used?

A. IP1
B. IP2
C. IP3
D. IP4

Correct Answer: A

New Question 7:

HOTSPOT

You have the hybrid network shown in the Network Diagram exhibit.

You have a peering connection between Vnet1 and Vnet2 as shown in the Peering-Vnet1- Vnet2 exhibit.

You have a peering connection between Vnet1 and Vnet3 as shown in the Peering -Vnet1- Vnet3 exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

New Question 8:

You have a website that uses an FQDN of www.contoso.com. The DNS record for www. contoso.com resolves to an on-premises web server.

You plan to migrate the website to an Azure web app named Web1. The website on Web1 will be published using an Azure Front Door instance named ContosoFD1.

You build the website on Web1.

You plan to configure ContosoFD1 to publish the website for testing.

When you attempt to configure a custom domain for www.contoso.com on ContosoFD1, you receive the error message shown in the exhibit. (Click the Exhibit tab.)

You need to test the website and ContosoFD1 without affecting user access to the on-premises web server.

Which record should you create in the contoso.com DNS domain?

You have a website that uses an FQDN of www.

A. a CNAME record that maps afdverify.www.contoso.com to ContosoFD1.azurefd.net
B. a CNAME record that maps www.contoso.com to ContosoFD1.azurefd.net
C. a CNAME record that maps afdverify.www.contoso.com to afdverify.ContosoFD1.azurefd.net
D. a CNAME record that maps www.contoso.com to Web1.contoso.com

Correct Answer: B

Reference: https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#map-the-temporary-afdverify-subdomain

New Question 9:

HOTSPOT

You have the Azure environment shown in the Azure Environment exhibit.

The settings for each subnet are shown in the following table.

The Firewalls and virtual network settings for storage1 are configured as shown in the Storage1 exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

New Question 10:

Azure virtual networks in the East US Azure region as shown in the following table.

The virtual networks peered at one another. Each virtual network contains four subnets.

You plan to deploy a virtual machine named VM1 that will inspect and route traffic between all the subnets on both the virtual networks.

What is the minimum number of IP addresses that you must assign to VM1?

A. 1
B. 2
C. 4
D. 8

Correct Answer: A

New Question 11:

HOTSPOT

You create NSG10 and NSG11 to meet the network security requirements.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Yes

subnet1(WM1->NSG1 outbound->NSG10 outbound)->subnet2(NSG1 inbound->NSG11 inbound->VM2)

Yes

NSG10 blocks ICMP from VNet4 (source 10.10.0.0/16) but it is not blocked from VM2s subnet (VNet1/Subnet2).

No

NSG11 blocks RDP (port TCP 3389) destined for the virtual network. the virtual network is a service tag and means the address space of the virtual network (VNet1) which in this case is 10.1.0.0/16. Therefore, RDP traffic from subnet2 to anywhere else in VNet1 is blocked.

New Question 12:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,

while

others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You configure the application gateway to direct traffic to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.

Solution: You create a WAF policy exclusion for request headers that contain 137.135.10.24.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Explanation: The parameter here should be RemoteAddr, not Request header.

New Question 13:

You fail to establish a Site-to-Site VPN connection between your company\’s main office and an Azure virtual network.

You need to troubleshoot what prevents you from establishing the IPsec tunnel.

Which diagnostic log should you review?

A. IKEDiagnosticLog
B. RouteDiagnosticLog
C. GatewayDiagnosticLog
D. TunnelDiagnosticLog

Correct Answer: A

IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to review when troubleshooting disconnections, or failure to connect VPN scenarios.

GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table.
TunnelDiagnosticLog = The TunnelDiagnosticLog table is very useful to inspect the historical connectivity statuses of the tunnel.

RouteDiagnosticLog = The RouteDiagnosticLog table traces the activity for statically modified routes or routes received via BGP.

P2SDiagnosticLog = The last available table for VPN diagnostics is P2SDiagnosticLog. This table traces the activity for Point to Site.

Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

Download the above Microsoft AZ-700 exam questions and answers:https://drive.google.com/file/d/1Wu0mOAnuH5xQVbtvl-ITT6wlkE1pYNAa/

If you want to get more than 700 points, the above practice is not enough, I recommend you to use Lead4Pass AZ-700 dumps: https://www.leads4pass.com/az-700.html (PDF+VCE),
Really help you to successfully pass the exam with a score of over 700.