Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
ServiceNow®
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-700

AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Free Practice Exam Questions (page: 11)
Updated On: 2-Jan-2026

Page 11 of 75
PDF with 369 Questions
View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You create an ExpressRoute circuit named ERC1 that is enabled by your connectivity provider.

You need to ensure that the routes for Azure Backup and Azure Cosmos DB are advertised to the on-premises network via ECR1.

The solution must minimize administrative effort.

What should you do? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Microsoft Peering
On the ExpressRoute circuit, configure:

Microsoft Peering on ExpressRoute allows customers to connect privately to Microsoft public services like Azure Storage and SQL. We are now [July 2019] announcing the addition of the Azure Cosmos DB community on ExpressRoute, which will allow for regional advertisements of Azure Cosmos DB. Microsoft peering also supports Azure Storage and Azure SQL.

Box 2: A route filter and a single filter rule
Associate the ExpressRoute circuit with:

Configure the filter rule to allow both the Azure Backup and Azure Cosmos DB services.
Incorrect:
* A route filter and two filter rules
A route filter can have only one rule, and the rule must be of type 'Allow'. This rule can have a list of BGP community values associated with it.

Note:
Connectivity to all Azure and Microsoft 365 services causes a large number of prefixes gets advertised through BGP. The large number of prefixes significantly increases the size of the route tables maintained by routers within your network. If you plan to consume only a subset of services offered through Microsoft peering, you can reduce the size of your route tables in two ways. You can:

Filter out unwanted prefixes by applying route filters on BGP communities. Route filtering is a standard networking practice and is used commonly within many networks.

Define route filters and apply them to your ExpressRoute circuit. A route filter is a new resource that lets you select the list of services you plan to consume through Microsoft peering. ExpressRoute routers only send the list of prefixes that belong to the services identified in the route filter.


Reference:

https://azure.microsoft.com/en-us/updates/azure-cosmos-db-expressroute-bgp-community-now-available/ https://learn.microsoft.com/en-us/azure/expressroute/how-to-routefilter-portal



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You plan to implement an Azure Virtual WAN named VWAN1 that will contain a hub named Hub1. VWAN1 will include the virtual networks shown in the following table.



You need to ensure that hosts connected to VNet1 can communicate with hosts connected to VNet3.

How should you configure the routing tables for VWAN1? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: From destination 10.2.0.0/16 to next hop Conn2.
Default route table

To reach VNet2 use Conn2, the hubs connection to VNet2.

Note:
Hub virtual network connection: Connects virtual networks to a virtual hub.

Association
Each connection is associated to one route table. Associating a connection to a route table allows the traffic (from that connection) to be sent to the destination indicated as routes in the route table. The routing configuration of the connection shows the associated route table. Multiple connections can be associated to the same route table. All VPN, ExpressRoute, and User VPN connections are associated to the same (default) route table.

By default, all connections are associated to a Default route table in a virtual hub. Each virtual hub has its own Default route table, which can be edited to add a static route(s). Routes added statically take precedence over dynamically learned routes for the same prefixes.



Box 2: From destination 10.2.3.0/24 to the next hop 10.2.0.5 Route table for Conn1

VNet1 connect to VNet3 (10.2.3.0/24) through the Network Virtual Appliance (10.2.0.5) in VNet2.

Configuring static routes in a virtual network connection
Configuring static routes provides a mechanism to steer traffic from the hub through a next hop IP, which could be of a Network Virtual Appliance (NVA) provisioned in a Spoke VNet attached to a virtual hub. The static route is composed of a route name, list of destination prefixes, and a next hop IP.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-wan/about-virtual-hub-routing



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You have 50 on-premises networks. Each network contains a server that runs Windows Server.

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a database server named DB1.

You plan to deploy an app named App1 that will be hosted on the on-premises servers and will connect to DB1 by using Azure Network Adapter.

What should you use to support the Azure Network Adapter connections to VNet1? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Azure VPN Gateway
For inbound connections to the subscription.

Windows Server, Use Azure Network Adapter to connect a server to an Azure Virtual Network

Windows Admin Center and Azure Network Adapter provide a one-click experience to connect the server with your virtual network using a Point-to-Site VPN connection. The process automates configuring the virtual network gateway and the on-premises VPN client.

If there is no existing Azure Virtual Network gateway, Windows Admin Center creates one for you. The setup process can take up to 25 minutes. After the Azure Network Adapter is created, you can start to access VMs in the virtual network directly from your server.

Note: A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.

Box 2: Point-to-Site VPN
For the connections beetween the on-premises servers and VNet1:

Note:
A lot of workloads running on-premises and in multi-cloud environments require connections to virtual machines (VMs) running in Microsoft Azure. To connect a server to an Azure Virtual Network, you have several options, including Site-to-Site VPN, Azure Express Route, and Point-to-Site VPN.


Reference:

https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network- adapter



View Related Case Study

You have an on-premises network.

You have an Azure subscription that contains a virtual network.

You have an ExpressRoute service provider.

You plan to connect the Azure virtual network and the on-premises network by using an ExpressRoute circuit.

You create a new ExpressRoute circuit.

You need to provision the new circuit.

Which information should you provide to the service provider?

  1. the IKEv2 shared key
  2. the certificate
  3. the public IP address
  4. the service key

Answer(s): D

Explanation:

ExpressRoute circuit
Ensure that your organization has met the ExpressRoute prerequisite requirements for connecting to Azure.
If you haven't already done so, add a subnet named GatewaySubnet to your Azure VNet and create an ExpressRoute virtual network gateway using the Azure VPN gateway service.
Create an ExpressRoute circuit as follows:
1. Run the following PowerShell command:
New-AzExpressRouteCircuit -Name <<circuit-name>> -ResourceGroupName <<resource-group>> -Location
2. Send the ServiceKey for the new circuit to the service provider.
3. Wait for the provider to provision the circuit. To verify the provisioning state of a circuit, run the following PowerShell command:
Get-AzExpressRouteCircuit -Name <<circuit-name>> -ResourceGroupName <<resource-group>>

The Provisioning state field in the Service Provider section of the output will change from NotProvisioned to Provisioned when the circuit is ready.
4. Etc.


Reference:

https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute



View Related Case Study

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that contains a virtual network named VNet1.

You plan to connect Server1 to VNet1 by using Azure Network Adapter.

You need to minimize how long it takes to deploy the adapter to Server1.

What should you create first?

  1. a route server
  2. an Azure Bastion host
  3. a private endpoint
  4. an Azure VPN gateway

Answer(s): D

Explanation:

Windows Server, Use Azure Network Adapter to connect a server to an Azure Virtual Network Windows Admin Center and Azure Network Adapter provide a one-click experience to connect the server with your virtual network using a Point-to-Site VPN connection. The process automates configuring the virtual network gateway and the on-premises VPN client.
If there is no existing Azure Virtual Network gateway, Windows Admin Center creates one for you. The setup process can take up to 25 minutes. After the Azure Network Adapter is created, you can start to access VMs in the virtual network directly from your server.
Note: A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.


Reference:

https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/use-azure-network- adapter



Viewing page 11 of 75
Viewing questions 51 - 55 out of 369 questions



Post your Comments and Discuss Microsoft AZ-700 exam prep with other Community members:

AZ-700 Exam Discussions & Posts