QUESTION: 484 Exam Topic: Deploy and manage Azure compute resources Questions

HOTSPOT (Drag and Drop is not supported)
You have a virtual network named VNET1 that contains the subnets shown in the following table:

You have two Azure virtual machines that have the network configurations shown in the following table:

For NSG1, you create the inbound security rule shown in the following table:

For NSG2, you create the inbound security rule shown in the following table:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Yes
The inbound security rule for NSG1 allows TCP port 1433 from 10.10.2.0/24 (or Subnet2 where VM2 and VM3 are located) to 10.10.1.0/24 (or Subnet1 where VM1 is located) while the inbound security rule for NSG2 blocks TCP port 1433 from 10.10.2.5 (or VM2) to 10.10.1.5 (or VM1). However, the NSG1 rule has a higher priority (or lower value) than the NSG2 rule.

Box 2: Yes
No rule explicitly blocks communication from VM1. The default rules, which allow communication, are thus applied.

Box 3: Yes
No rule explicitly blocks communication between VM2 and VM3 which are both on Subnet2. The default rules, which allow communication, are thus applied.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Reveal Solution Next Question

QUESTION: 485 Exam Topic: Deploy and manage Azure compute resources Questions

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Subscription1. Subscription1 contains the virtual machines in the following table:

Subscription1 contains a virtual network named VNet1 that has the subnets in the following table:

VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.

You create a route table named RT1 that contains the routes in the following table:

You apply RT1 to Subnet1 and Subnet2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

IP forwarding enables the virtual machine a network interface is attached to:

-Receive network traffic not destined for one of the IP addresses assigned to any of the IP configurations assigned to the network interface.
-Send network traffic with a different source IP address than the one assigned to one of a network interface's IP configurations.

The setting must be enabled for every network interface that is attached to the virtual machine that receives traffic that the virtual machine needs to forward. A virtual machine can forward traffic whether it has multiple network interfaces or a single network interface attached to it.

Box 1: Yes
The routing table allows connections from VM3 to VM1 and VM2. And as IP forwarding is enabled on VM3, VM3 can connect to VM1.

Box 2: No
VM3, which has IP forwarding, must be turned on, in order for VM2 to connect to VM1.

Box 3: Yes
The routing table allows connections from VM1 and VM2 to VM3. IP forwarding on VM3 allows VM1 to connect to VM2 via VM3.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview https://www.quora.com/What-is-IP-forwarding

Reveal Solution Next Question

QUESTION: 486 Exam Topic: Deploy and manage Azure compute resources Questions

Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources:
-A web app named webapp1
-A virtual network named VNET1

You need to ensure that webapp1 can connect to Share1. What should you deploy?

an Azure Application Gateway
an Azure Active Directory (Azure AD) Application Proxy
an Azure Virtual Network Gateway

Answer(s): C

Explanation:

A Site-to-Site VPN gateway connection can be used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.
This type of connection requires a VPN device, a VPN gateway, located on-premises that has an externally facing public IP address assigned to it.

Incorrect Answers:
B: Application Proxy is a feature of Azure AD that enables users to access on-premises web applications from a remote client.

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Reveal Solution Next Question

QUESTION: 487 Exam Topic: Deploy and manage Azure compute resources Questions

You have an Azure subscription that contains the resources shown in the following table.

You create a public IP address named IP1.

Which two resources can you associate to IP1? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

VM1
LB1
NIC1
VPN1
VNet1

Answer(s): B,C

Reveal Solution Next Question

Free AZ-104 Exam Braindumps (page: 52)

QUESTION: 484 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 485 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 486 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 487 Exam Topic: Deploy and manage Azure compute resources Questions