AZ-700のPDF試験材料2025年最新の実際に出るAZ-700問題集 [Q37-Q60]

AZ-700のPDF試験材料2025年最新の実際に出るAZ-700問題集

更新されたのはMicrosoft AZ-700問題集PDFオンラインエンジン

Microsoft AZ-700試験は、Microsoft Azure Networking Solutionsの設計と実装のスキルを検証したい個人向けに設計されています。この試験では、Azureプラットフォームにさまざまなネットワーキングソリューションを設計および実装する候補者の能力のテストに焦点を当てています。 Azure Virtual Networks、Azure Load Balancers、Azure VPN Gateways、Azure ExpressRoute、Azure DNSなどのトピックをカバーしています。

質問 # 37
You have an Azure subscription that contains the public IPv4 addresses shown in the following table.

You plan to create a load balancer named LB1 that will have the following settings:
* Name: LB1
* Location: West US
* Type: Public
* SKU: Standard
Which public IPv4 addresses can be used by LB1?

A. IP1 and IP3 only
B. IP1, IP2. IP3. IP4. and IP5
C. IP2only
D. IP1, IP3, IP4, and 1P5 only
E. IP3 and IP5 only
F. IP3 only

正解：E

解説：
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address This is because "Load balancer and the public IP address SKU must match when you use them with public IP addresses" https://docs.microsoft.com/en-us/azure/load-balancer/skus Standard SKU Load Balancer routes traffic within and across regions, and to Availability Zones for high resiliency.

質問 # 38
You have an Azure subscription that contains the resources shown in the following table.

NSG1 is associated to the NIC of VM1 and contains the rules shown in the following table.

You collect NSG flow logs for five minutes for the following activities:
* Two RDP sessions from VM1 to VM2, each initiated from a different TCP port
* Three SSH sessions from VM2 to VM1, each initiated from a different TCP port You analyze the logs by using Traffic Analytics in Azure Network Watcher. How many aggregated flow entries will Traffic Analytics identify?

A. 0
B. 1
C. 2
D. 3

正解：A

質問 # 39
You have an Azure subscription. The subscription contains 500 virtual machines that run either Windows 11 or Linux.
You need to identify which Linux virtual machines are accessible from the internet. The solution must minimize administrative effort.
What should you use, and what should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 40
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.
You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.
Solution: You disable the WAF rule that has a ruleld of 920300.
Does this meet the goal?

A. Yes
B. No

正解：A

質問 # 41
You have an Azure subscription that contains a dual-stack virtual network named VNet1. VNet1 has the following IP address spaces:
* IPv4:192.168.0.0/24
* IPv6: fd0adbftdeca: deed: y48
You plan to deploy an Azure VPN gateway and multiple virtual machines to VNet1.
You need to configure the subnet masks for VNet1. The solution must meet the following requirements:
* Maximize the number of usable IP addresses.
* Support the deployment of the VPN gateway and the virtual machines.
Which subnet mask should you use for each address space? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 42
You have an Azure subscription that contains the virtual networks shown in the following table.

The subscription contains the virtual machines shown in the following table.

You create a load balancer named LB1 that has the following configurations:
* SKU: Basic
* Type: Internal
* Subnet: Subnetl2
* Virtual network VNet1
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

質問 # 43
You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.
What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 44
Your on-premises network contains an Active Directory Domain Services {AD DS) domain named contoso.
com that has an internal certification authority (CA).
You have an Azure subscription.
You deploy an Azure application gateway named AppGwy1 and perform the following actions:
* Configure an HTTP listener.
* Associate a routing rule with the listener.
You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

Explanation:

質問 # 45
Your company has offices in New York and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-to-Site VPN connection.
The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region.
You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises servers in the New York office by using the ExpressRoute circuits.
Which ExpressRoute option should you use?

A. ExpressRoute Local
B. ExpressRoute Global Reach
C. ExpressRoute FastPath
D. ExpressRoute Direct

正解：A

質問 # 46
You need to connect an on-premises network and an Azure environment. The solution must use ExpressRoute and support failing over to a Site-to-Site VPN connection if there is an ExpressRoute failure.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager

質問 # 47
You need to meet the network security requirements for the NSG flow logs.
Which type of resource do you need, and how many instances should you create? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

質問 # 48
You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.
You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.
You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.
What should you include in the solution?

A. A Site to site gateway (VPN gateway)
B. A Network Virtual Appliance (NVA)
C. An Azure Virtual WAN ExpressRoute gateway
D. A Point to site gateway (User VPN gateway)

正解：B

質問 # 49
SIMULATION
Task 4
You need to ensure that the owner of VNET3 receives an alert if an administrative operation is performed on the virtual network.

正解：

解説：
See the Explanation below for step by step instructions
Explanation:
To ensure that the owner of VNET3 receives an alert whenever an administrative operation is performed on the virtual network, you can set up an Activity Log Alert in Azure Monitor. Here's how you can do it:
Step-by-Step Solution
Step 1: Create an Activity Log Alert
Navigate to the Azure Portal.
Search for "Monitor" and select it.
In the Monitor blade, select "Alerts" from the left-hand menu.
Click on "New alert rule".
Step 2: Configure the Alert Rule
Select the Scope:
Click on "Select resource".
Choose "Virtual Network" as the resource type.
Select VNET3 from the list of virtual networks.
Define the Condition:
Click on "Add condition".
In the "Signal type" dropdown, select "Activity Log".
Choose "Administrative" as the category.
Select the specific operations you want to monitor (e.g., Microsoft.Network/virtualNetworks/write for any write operations on the virtual network).
Set the Alert Details:
Enter a name for the alert rule (e.g., VNET3 Admin Operations Alert).
Provide a description if needed.
Configure the Action Group:
Click on "Add action group".
Enter a name for the action group.
Select the action type (e.g., Email/SMS/Push/Voice).
Enter the details of the recipient (e.g., the email address of the owner of VNET3).
Review and Create:
Review the alert rule settings.
Click on "Create alert rule".
Explanation:
Activity Log Alerts: These alerts notify you when specific operations are performed on your Azure resources. By setting up an alert for administrative operations, you ensure that any changes to VNET3 are promptly reported.
Action Groups: These define the actions to take when an alert is triggered. You can configure notifications via email, SMS, or other methods to ensure the owner of VNET3 is informed immediately.
Administrative Operations: Monitoring these operations helps in tracking changes and maintaining the security and integrity of your virtual network.
By following these steps, you can ensure that the owner of VNET3 receives timely alerts for any administrative operations performed on the virtual network, helping to maintain oversight and security.

質問 # 50
Your on-premises network contains an Active Directory Domain Services {AD DS) domain named contoso.com that has an internal certification authority (CA).
You have an Azure subscription.
You deploy an Azure application gateway named AppGwy1 and perform the following actions:
* Configure an HTTP listener.
* Associate a routing rule with the listener.
You need to configure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

1 - From AppGwy1, create a frontend IP configuration.
2 - From AppGwy1, create an SSL profile.
3 - From an on-premises computer, upload a certificate to AppGwy1.
4 - From AppGwy1, add an HTTP listener and associate the listener to the SSL profile.

質問 # 51
You have an Azure subscription that contains an ExpressRoute Standard gateway named GW1.
You need to upgrade GW1 to support ExpressRoute FastPath. The solution must minimize downtime.
Which SKU should you use?

A. High performance
B. ErGw3AZ
C. ErGw2AZ
D. Ultra performance

正解：D

質問 # 52
You have an Azure subscription that contains the public IP addresses shown in the following table.

You plan to deploy a NAT gateway named NAT1.
Which public IP addresses can be used as the public IP address for NAT1?

A. IP1, IP3, and IP5 only
B. IP3 and IP5 only
C. IP2 and IP4 only
D. IP3 only
E. IP5 only

正解：D

解説：
Only static IPv4 addresses in the Standard SKU are supported. IPv6 doesn't support NAT.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview

質問 # 53
You need to recommend a configuration for the ExpressRoute connection from the Boston datacenter. The solution must meet the hybrid networking requirements and business requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation:

For the first question, only ExpressRoute GW SKU Ultra Performance support FastPath feature.
For the second question, vnet1 will connect to ExpressRoute gw, once Vnet1 peers with Vnet2, the traffic from on-premise network will bypass GW and Vnet1, directly goes to Vnet2, while this feature is under public preview.
====Reference
ExpressRoute virtual network gateway is designed to exchange network routes and route network traffic.
FastPath is designed to improve the data path performance between your on-premises network and your virtual network. When enabled, FastPath sends network traffic directly to virtual machines in the virtual network, bypassing the gateway.
To configure FastPath, the virtual network gateway must be either:
Ultra Performance
ErGw3AZ
VNet Peering - FastPath will send traffic directly to any VM deployed in a virtual network peered to the one connected to ExpressRoute, bypassing the ExpressRoute virtual network gateway.
https://docs.microsoft.com/en-us/azure/expressroute/about-fastpath
Gateway SKU
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways

質問 # 54
You have an Azure subscription that contains an Azure Front Door named FD1. FD1 is configured as shown in the following exhibit.

You need to enable Azure Private Link for FD1.
What should you do first?

A. Create a custom route.
B. Change Pricing Tier to Azure Front Door Premium.
C. Add an endpoint.
D. Create an origin group.

正解：B

質問 # 55
You are planning an Azure solution that will contain the following types of resources in a single Azure region:
Virtual machine
Azure App Service
Virtual Network gateway
Azure SQL Managed Instance
App Service and SQL Managed Instance will be delegated to create resources in virtual networks.
You need to identify how many virtual networks and subnets are required for the solution. The solution must minimize costs to transfer data between virtual networks.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解：

解説：

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-for-azure-services#services-that-can-be-deployed-into-a-virtual-network

質問 # 56
You have an Azure virtual network named Vnet1 that contains two subnets named Subnet1 and Subnet2.
You have the NAT gateway shown in the NATgateway1 exhibit.

You have the virtual machine shown in the VM1 exhibit.

Subnet1 is configured as shown in the Subnet1 exhibit.

For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation
Graphical user interface, text, application Description automatically generated

Box 1: No
VM1 is in Zone2 whereas the NAT Gateway is in Zone1. The VM would need to be in the same zone as the NAT Gateway to be able to use it. Therefore, VM1 cannot use the NAT gateway.
Box 2: Yes
NATgateway1 is configured in the settings for Subnet2.
Box 3: No
The NAT gateway does not have a single public IP address, it has an IP prefix which means more than one IP address. The VMs the use the NAT Gateway can use different public IP addresses contained within the IP prefix.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource

質問 # 57
You have an Azure load balancer that has the following configurations:
* Name:LB1
* Location: East US 2
* SKU: Standard
* Private IP address: 10.3.0.7
* Load balancing rule: rule! (Tcp/80)
* Health probe: probe1 (Http:80)
* NAT rules; 0 inbound
The backend pool of LB1 has the following configurations:
* Name: backend I
* Virtual network: Vnet1
* Backend pool configuration: NIC
* IP version: IPv4
* Virtual machines: VM1.VM2. VM3:
You have an Azure virtual machine named VM4 that has the following network configurations:
* Network interface: vm49Sl
* Virtual network/subnet: Vnet3/Subnet3
* NIC private IP address: 10.4.0.4
* Accelerated networking: Enabled
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

正解：

解説：

Explanation

質問 # 58
You have an Azure virtual network named Vnet1 that connects to an on-premises network.
You have an Azure Storage account named storageaccount1 that contains blob storage.
You need to configure a private endpoint for the blob storage. The solution must meet the following requirements:
Ensure that all on-premises users can access storageaccount1 through the private endpoint.
Prevent access to storageaccount1 from being interrupted.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

正解：

解説：

1 - Configuration a private endpoint on storageaccount1...
2 - Deploy a virtual machine to a subnet in Vnet1
3 - Install the DNS server role and configure...
4 - Configure on-premises DNS servers to forward blog...
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

質問 # 59
You have the Azure resources shown in the following table.

You need to link VNei2 to Circuit1
What should you create in each subscription? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.