QUESTION: 16 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You have on-premises datacenters in New York and Seattle.

You have an Azure subscription that contains the ExpressRoute circuits shown in the following table.

You need to ensure that all the data sent between the datacenters is routed via the ExpressRoute circuits. The solution must minimize costs.

How should you configure the network? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Global Reach
ExpressRoute Global Reach is the service where if you have two datacenters, which are located at different geo-locations and both are connected to Microsoft Azure via Express Route then these two datacenters can also connect to each other securely via Microsoft's backbone.

Incorrect:
FastPath is designed to improve the data path performance between your on-premises network and your virtual network.
When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.

Box 2: Private
With ExpressRoute Global Reach, you can link ExpressRoute circuits together to make a private network between your on-premises networks.

Reference:

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-global-reach

Show Answer Next Question

QUESTION: 17 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

View Related Case Study

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices.

In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.

You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.

You need to ensure that the on-premises network can connect to the route-based GW1.

What should you do before you create the connection?

Set Connection Mode to ResponderOnly.
Set BGP to Enabled.
Set Use Azure Private IP Address to Enabled.
Set IPsec / IKE policy to Custom.

Answer(s): D

Show Answer Next Question

QUESTION: 18 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

View Related Case Study

HOTSPOT (Drag and Drop is not supported)

Your on-premises network contains a VPN device.

You have an Azure subscription that contains a virtual network and a virtual network gateway.

You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: New-AzIpsecPolicy
Configure IPsec/IKE policy for S2S (Site-to-Site) VPN or VNet-to-VNet connections Create a S2S VPN connection with an IPsec/IKE policy

1. Create an IPsec/IKE policy
The following sample script creates an IPsec/IKE policy with the following algorithms and parameters:

IKEv2: AES256, SHA384, DHGroup24
IPsec: AES256, SHA256, PFS None, SA Lifetime 14400 seconds & 102400000KB

$ipsecpolicy6 = New-AzIpsecPolicy -IkeEncryption AES256 -IkeIntegrity SHA3

2. Create the S2S VPN connection with the IPsec/IKE policy
Create an S2S VPN connection and apply the IPsec/IKE policy created earlier.

$vnet1gw = Get-AzVirtualNetworkGateway -Name $GWName1 -ResourceGroupName $RG1 $lng6 = Get-AzLocalNetworkGateway -Name $LNGName6 -ResourceGroupName $RG1

New-AzVirtualNetworkGatewayConnection -Name $Connection16 -ResourceGroup

Box 2: New-AzVirtualNetworkGatewayConnection

Reference:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-ipsecikepolicy-rm-powershell

Show Answer Next Question

QUESTION: 19 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

View Related Case Study

HOTSPOT (Drag and Drop is not supported)

You have an Azure virtual network and an on-premises datacenter that connect by using a Site-to-Site VPN tunnel.

You need to ensure that all traffic from the virtual network to the internet is routed through the datacenter.

How should you complete the PowerShell script to configure forced tunneling? To answer, select the appropriate options in the answer area.

Note: Each correct selection is worth one point.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Get-AzLocalNetworkGateway
See step 5 below.

Configure forced tunneling
1. Create a resource group.
New-AzResourceGroup -Name 'ForcedTunneling' -Location 'North Europe'

2. Create a virtual network and specify subnets.

3. Create the local network gateways.
Example:
$lng1 = New-AzLocalNetworkGateway -Name "DefaultSiteHQ" -ResourceGroupName "ForcedTunneling" - Location "North Europe" -GatewayIpAddress "111.111.111.111" -AddressPrefix "192.168.1.0/24"

4. Create the virtual network gateway.

5. Assign a default site to the virtual network gateway. The -GatewayDefaultSite is the cmdlet parameter that allows the forced routing configuration to work, so take care to configure this setting properly.

$LocalGateway = Get-AzLocalNetworkGateway -Name "DefaultSiteHQ" -ResourceGroupName "ForcedTunneling"
$VirtualGateway = Get-AzVirtualNetworkGateway -Name "Gateway1" -ResourceGroupName "ForcedTunneling"
Set-AzVirtualNetworkGatewayDefaultSite -GatewayDefaultSite $LocalGateway -VirtualNetworkGateway $VirtualGateway

6. Establish the Site-to-Site VPN connections.
Details omitted.

Box 2: Set-AzVirtualNetworkGatewayDefaultSite

Reference:

https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

Show Answer Next Question

QUESTION: 20 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

View Related Case Study

You are planning an Azure deployment that will contain three virtual networks in the East US Azure region as shown in the following table.

A Site-to-Site VPN will connect Vnet1 to your company's on-premises network.

You need to recommend a solution that ensures that the virtual machines on all the virtual networks can communicate with the on-premises network. The solution must minimize costs.

What should you recommend for Vnet2 and Vnet3?

VNet-to-VNet VPN connections
peering
service endpoints
route tables

Answer(s): B

Explanation:

Virtual network peering seamlessly connects two Azure virtual networks, merging the two virtual networks into one for connectivity purposes. The virtual networks appear as one for connectivity purposes. The traffic between virtual machines in peered virtual networks uses the Microsoft backbone infrastructure. Like traffic between virtual machines in the same network, traffic is routed through Microsoft's private network only.

Reference:

https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

Show Answer Next Question

Free Microsoft AZ-700 Exam Questions (page: 5)

QUESTION: 16 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

Explanation:

Reference:

QUESTION: 17 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

QUESTION: 18 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

Explanation:

Reference:

QUESTION: 19 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

Explanation:

Reference:

QUESTION: 20 Exam Topic: Design, implement, and manage connectivity services (Testlet 3)

Explanation:

Reference:

AZ-700 Exam Discussions & Posts