Cisco®
CompTIA
Checkpoint
ISC
EC-Council
EXIN
Fortinet
ITIL®
Juniper
Microsoft
VMware
Avaya
SAP
Google
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk®
ServiceNow®
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-700

AZ-700: Designing and Implementing Microsoft Azure Networking Solutions
Free Practice Exam Questions (page: 16)
Updated On: 2-Jan-2026

Page 15 of 75
PDF with 369 Questions
View Related Case Study

What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?

  1. a private endpoint
  2. a routing table
  3. a service endpoint
  4. a private link service
  5. a virtual network peering

Answer(s): E

Explanation:

There is no virtual network peering between VM4's VNet (VNet3) and VM5's VNet (VNet4). To enable the VMs to communicate over the Microsoft backbone network a VNet peering is required between VNet3 and VNet4.



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You are implementing the virtual network requirements for Vnet6.

What is the minimum number of subnets and service endpoints you should create? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: 3
Subnets

* One subnet for the three VMs
Virtual network and subnets
A subnet is a range of IP addresses in the virtual network. You can divide a virtual network into multiple subnets for organization and security. Each NIC in a VM is connected to one subnet in one virtual network. NICs connected to subnets (same or different) within a virtual network can communicate with each other without any extra configuration.

* One gateway subnet for the incoming VPN connection.
About the gateway subnet
The virtual network gateway uses specific subnet called the gateway subnet. The gateway subnet is part of the virtual network IP address range that you specify when configuring your virtual network. It contains the IP addresses that the virtual network gateway resources and services use. The subnet must be named 'GatewaySubnet' in order for Azure to deploy the gateway resources.

* One subnet for the two container groups
To deploy to a new virtual network and have Azure create the network resources for you automatically, specify the following when you execute az container create:

Virtual network name
Virtual network address prefix in CIDR format
Subnet name
Subnet address prefix in CIDR format

Once you've deployed your first container group with this method, you can deploy to the same subnet by specifying the virtual network and subnet names, or the network profile that Azure automatically creates for you. Because Azure delegates the subnet to Azure Container Instances, you can deploy only container groups to the subnet.

Note:
Contoso has the following virtual network requirements:

Create a virtual network named Vnet6 in West US that will contain the following resources and configurations:
Two container groups that connect to Vnet6
Three virtual machines that connect to Vnet6
Allow VPN connections to be established to Vnet6
Allow the resources in Vnet6 to access KeyVault1, DB1, and Vnet1 over the Microsoft backbone network.

Box 2: 2
* One Service Endpoint for the Azure KeyVault KeyVault1.
The virtual network service endpoints for Azure Key Vault allow you to restrict access to a specified virtual network.

* One Service Endpoint for the Azure SQL Database DB1.
Service endpoints are a networking feature in Azure designed to help you better identify traffic coming into your Azure SQL Database as originating from one or more of your VNets.

Note: Service endpoints are a networking feature in Azure designed to help you better identify traffic coming into your Azure SQL Database as originating from one or more of your VNets.

Service endpoints are available for the following Azure services and regions.
Azure SQL Database
Azure Key Vault
Etc.


Reference:

https://learn.microsoft.com/en-us/azure/virtual-network/network-overview https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell https://learn.microsoft.com/en-us/azure/container-instances/container-instances-vnet https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview https://learn.microsoft.com/en-us/azure/key-vault/general/overview-vnet-service-endpoints



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

Which virtual machines can VM1 and VM4 ping successfully before NSG10 and NSG11 are created? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: VM2 only.
VM1

VM1 is in West US, is connected to Vnet1/Subnet1, and has NSG1. The Azure Private DNS zone zone2.contoso.com is in West US, but has no virtual network links.
VM2 is also in Vnet1.

Box 2: VM3 only
VM4

VM4 is in Central US, is connected to Vnet3/Default, and has NSG1. The Azure Private DNS zone zone1.contoso.com is in Central US. zone1.contoso.com has a virtual network link to Vnet2, and the link is not configured for Auto registration. In Vnet2 there is VM3. VM4 can reach VM3.
zone1.contoso.com has a virtual network link to Vnet3, and this link is configured for Auto registration.

Note: Registration virtual network
When creating a link between a private DNS zone and a virtual network. You have the option to enable autoregistration. With this setting enabled, the virtual network becomes a registration virtual network for the private DNS zone. A DNS record gets automatically created for any virtual machines you deploy in the virtual network. DNS records will also be created for virtual machines already deployed in the virtual network.

From the virtual network perspective, private DNS zone becomes the registration zone for that virtual network. A private DNS zone can have multiple registration virtual networks. However, every virtual network can only have one registration zone associated with it.

Resolution virtual network
If you choose to link your virtual network with the private DNS zone without autoregistration, the virtual network is treated as a resolution virtual network only. DNS records for virtual machines deployed this virtual network won't be created automatically in the private zone. However, virtual machines deployed in the virtual network can successfully query for DNS records in the private zone. These records include manually created and auto registered records from other virtual networks linked to the private DNS zone.

Note Scenario:



Azure Private DNS Zones

The Azure subscription contains the Azure private DNS zones shown in the following table.



Zone1.contoso.com has the virtual network links shown in the following table.


Reference:

https://learn.microsoft.com/en-us/azure/dns/private-dns-virtual-network-links

Design and implement Core Networking Infrastructure

Question Set 4



View Related Case Study

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You enable BGP on the gateway of Vnet1.

Does this meet the goal?

  1. Yes
  2. No

Answer(s): B

Explanation:

The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.


Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing



View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You have the Azure environment shown in the following exhibit.



Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

Note: Each correct selection is worth one point.

Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit?toc=/azure/virtual- network/toc.json



Viewing page 16 of 75
Viewing questions 76 - 80 out of 369 questions



Post your Comments and Discuss Microsoft AZ-700 exam prep with other Community members:

AZ-700 Exam Discussions & Posts