Microsoft AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Free Practice Test — 30 Questions

Question 1

A company is experiencing intermittent network performance issues, and the IT team has decided to implement a network monitoring tool to diagnose the problem. They are considering various metrics to monitor, including latency, packet loss, and throughput. If the team wants to establish a baseline for normal network performance, which of the following metrics should they prioritize for initial monitoring to effectively identify anomalies in their network traffic?

Accepted Answer

Latency

Question 2

A company is deploying an Application Gateway in Azure to manage incoming web traffic for its e-commerce platform. The platform experiences varying traffic loads throughout the day, with peak traffic occurring during promotional events. The company wants to ensure high availability and optimal performance while minimizing costs. Which configuration should the company implement to achieve these goals effectively?

Accepted Answer

Use the Application Gateway with autoscaling enabled and configure a Web Application Firewall (WAF) to protect against common web vulnerabilities.

Question 3

In a cloud-based telecommunications environment, a company is looking to implement Network Function Virtualization (NFV) to enhance its service delivery and reduce hardware dependency. They plan to deploy multiple virtual network functions (VNFs) across various servers to optimize resource utilization. If the company has a total of 100 virtual machines (VMs) available and each VNF requires an average of 4 VMs to operate effectively, how many VNFs can the company deploy simultaneously without exceeding the available resources? Additionally, consider that each VNF has a 10% overhead in resource allocation for management and monitoring. What is the maximum number of VNFs that can be deployed?

Accepted Answer

22

Question 4

A company is planning to implement a hybrid cloud solution using Microsoft Azure. They want to ensure that their on-premises network can securely connect to Azure resources while maintaining high availability and low latency. Which of the following configurations would best achieve this goal while adhering to Azure\'s best practices for network connectivity?

Accepted Answer

Implementing Azure ExpressRoute with a redundant circuit and configuring a VPN Gateway as a backup for failover.

Question 5

A company is implementing Azure Firewall to enhance its network security. They need to configure the firewall to allow only specific outbound traffic to the internet while blocking all other traffic. The security team has identified that they want to permit HTTP and HTTPS traffic to a specific set of IP addresses and block all other outbound connections. Additionally, they want to ensure that the firewall logs all denied traffic for auditing purposes. Which configuration approach should the team take to achieve this?

Accepted Answer

Create application rules for HTTP and HTTPS traffic to the specified IP addresses and configure logging for denied traffic.

Question 6

A company is deploying a multi-region application in Azure that requires efficient traffic distribution across its instances located in different geographical locations. The application is designed to handle varying loads, and the company wants to ensure that users are directed to the nearest instance to minimize latency. Which Azure service should the company implement to achieve optimal traffic distribution while also providing health monitoring and automatic failover capabilities?

Accepted Answer

Azure Traffic Manager

Question 7

A company is planning to deploy a multi-tier application in Azure that requires secure communication between its various components, including web servers, application servers, and databases. The architecture involves using Azure Virtual Networks (VNets) to isolate these components and Azure Network Security Groups (NSGs) to control traffic flow. If the company wants to ensure that only specific IP addresses can access the web servers while allowing unrestricted access between the application servers and the databases, what is the best approach to configure the NSGs for this scenario?

Accepted Answer

Create an NSG for the web servers that allows inbound traffic only from the specified IP addresses and denies all other inbound traffic, while allowing all traffic between the application servers and databases.

Question 8

A company is planning to design a new Azure virtual network to support a multi-tier application architecture. The application consists of a web tier, an application tier, and a database tier. The company wants to ensure that the network design adheres to best practices for security, performance, and scalability. Which of the following design principles should be prioritized to achieve these goals while minimizing latency between tiers?

Accepted Answer

Implementing Network Security Groups (NSGs) to control traffic flow between subnets and applying segmentation based on tier functionality.

Question 9

A company is planning to implement a hybrid cloud solution that integrates its on-premises data center with Microsoft Azure. They want to ensure that their applications can communicate securely and efficiently across both environments. Which of the following networking solutions would best facilitate this integration while providing low latency and high throughput for their applications?

Accepted Answer

Azure ExpressRoute

Question 10

A company is planning to implement a hybrid cloud solution that integrates their on-premises data center with Microsoft Azure. They need to ensure that their virtual networks in Azure can communicate securely with their on-premises network while maintaining high availability and low latency. Which approach should they take to achieve this integration effectively?

Accepted Answer

Implement a Site-to-Site VPN connection between the on-premises network and Azure Virtual Network.

Question 11

A company is planning to deploy multiple Azure resources for a new application that will handle sensitive customer data. They want to ensure that all resources are organized efficiently for management and compliance purposes. The resources include virtual machines, databases, and storage accounts. Given the need for compliance with data residency regulations and the requirement for role-based access control (RBAC), which approach should the company take regarding resource grouping in Azure?

Accepted Answer

Create a dedicated resource group for the application that includes all related resources, ensuring that they are managed together and can be governed by specific policies.

Question 12

A company is implementing Role-Based Access Control (RBAC) in its Azure environment to manage permissions for its development and operations teams. The development team needs to have the ability to create and manage resources, while the operations team should only have read access to those resources. The company has defined two roles: \"Developer\" with permissions to create and manage resources, and \"Operator\" with permissions limited to read access. If a user is assigned both roles, what will be the effective permissions for that user, and how does RBAC handle the situation of overlapping roles?

Accepted Answer

The user will have both create/manage and read access permissions due to the principle of least privilege.

Question 13

A company is planning to implement a hybrid cloud solution that integrates its on-premises data center with Microsoft Azure. They want to ensure that their applications can communicate securely and efficiently across both environments. Which of the following networking solutions would best facilitate this integration while providing high availability and low latency?

Accepted Answer

Azure ExpressRoute

Question 14

A company is planning to set up a new Azure Virtual Network (VNet) to host multiple applications across different regions. They want to ensure that the VNet can accommodate a large number of virtual machines (VMs) and provide efficient communication between them. The company has decided to use a Classless Inter-Domain Routing (CIDR) block of /16 for their VNet. Given this configuration, how many usable IP addresses will the company have for their VMs, considering that Azure reserves 5 IP addresses in each subnet for its own use?

Accepted Answer

65,531 usable IP addresses

Question 15

A company is evaluating its Azure networking costs and wants to optimize its expenses related to data transfer. They have two virtual networks (VNet A and VNet B) that communicate with each other. VNet A has an outbound data transfer of 500 GB to VNet B, while VNet B has an inbound data transfer of 300 GB from VNet A. The company is considering implementing VNet Peering to reduce costs. Given that the cost of outbound data transfer is $0.087 per GB and the cost of inbound data transfer is $0.01 per GB, what would be the total cost savings if they switch to VNet Peering, which allows for free data transfer between the two VNets?

Accepted Answer

$43.50

Question 16

A company has deployed a web application in Azure that is accessible over the internet. The application is hosted in a virtual machine (VM) within a virtual network (VNet). The security team has implemented Network Security Groups (NSGs) to control inbound and outbound traffic to the VM. They want to ensure that only HTTP (port 80) and HTTPS (port 443) traffic is allowed from the internet while blocking all other inbound traffic. Additionally, they need to allow all outbound traffic from the VM to the internet. Given this scenario, which of the following configurations for the NSG would best achieve these requirements?

Accepted Answer

Allow inbound traffic on ports 80 and 443; deny all other inbound traffic; allow all outbound traffic.

Question 17

A company is planning to establish a Site-to-Site VPN connection between its on-premises network and its Azure virtual network. The on-premises network uses a static public IP address of 203.0.113.5, while the Azure virtual network has a dynamic public IP address assigned to its VPN gateway. The company needs to ensure that the VPN connection remains stable and secure, even if the Azure VPN gateway\'s public IP changes. Which configuration should the company implement to achieve this?

Accepted Answer

Configure a static public IP address for the Azure VPN gateway.

Question 18

A company has deployed a multi-tier application in Azure, consisting of a web front-end, an application layer, and a database layer. Users are reporting intermittent connectivity issues when trying to access the application. The network team has verified that the web front-end is reachable, but the application layer is experiencing timeouts. What is the most effective first step to diagnose the connectivity issue between the web front-end and the application layer?

Accepted Answer

Use Azure Network Watcher to run a connection troubleshoot to the application layer from the web front-end.

Question 19

A company is experiencing intermittent connectivity issues in its Azure virtual network, which is affecting the performance of its applications. The network team has been tasked with analyzing the network performance metrics to identify the root cause. They notice that the average round-trip time (RTT) for packets sent from a virtual machine (VM) in the East US region to a database in the West US region is consistently around 150 ms, with a standard deviation of 30 ms. Additionally, they observe that the packet loss rate is approximately 5%. Given this information, what could be the most likely contributing factor to the observed network performance issues?

Accepted Answer

High latency due to geographical distance between regions

Question 20

A company is planning to implement a hybrid cloud solution using Microsoft Azure and its on-premises infrastructure. They need to ensure that their network architecture is resilient and can handle failover scenarios effectively. Which resource or documentation should the network architect prioritize to understand best practices for designing a resilient hybrid network architecture in Azure?

Accepted Answer

Azure Architecture Center

Question 21

In a large organization, the IT department is tasked with creating a naming convention for Azure resources that will facilitate easy identification and management. The organization has multiple departments, each with its own set of resources, and they want to ensure that the naming convention reflects the department, resource type, and environment. Given the following requirements: the department code should be a maximum of 3 characters, the resource type should be abbreviated to 4 characters, and the environment should be indicated by a single character (e.g., \'P\' for Production, \'D\' for Development). If the IT department decides to implement a naming convention that follows the format: [DepartmentCode]-[ResourceType]-[Environment], which of the following examples adheres to these guidelines?

Accepted Answer

HR-VM-P

Question 22

A company is experiencing intermittent connectivity issues with its Azure Virtual Network (VNet) that connects multiple on-premises locations through a VPN Gateway. The network administrator needs to diagnose the problem effectively. Which approach should the administrator take to monitor and troubleshoot the Azure networking environment, ensuring that they gather comprehensive data for analysis?

Accepted Answer

Utilize Azure Network Watcher to enable packet capture and analyze the flow logs for the VPN Gateway to identify any dropped packets or latency issues.

Question 23

A company is planning to integrate its on-premises Active Directory with Azure Active Directory (Azure AD) to enable single sign-on (SSO) for its employees. The IT team needs to ensure that users can access both cloud and on-premises applications seamlessly. They are considering using Azure AD Connect for this integration. Which of the following configurations would best support this requirement while ensuring that user identities are synchronized and managed effectively?

Accepted Answer

Implement Azure AD Connect with password hash synchronization and enable seamless SSO using the Azure AD Application Proxy.

Question 24

A company is implementing Role-Based Access Control (RBAC) in their Azure environment to manage permissions for their development team. The team consists of three roles: Developers, Testers, and Project Managers. Each role requires different levels of access to resources. The Developers need to create and manage resources, the Testers need to access and run tests on those resources, and the Project Managers need to view reports and manage budgets without altering resources. If the company decides to assign the \"Contributor\" role to Developers, the \"Reader\" role to Testers, and a custom role with limited permissions to Project Managers, which of the following statements best describes the implications of this RBAC configuration?

Accepted Answer

The Developers will have full control over resources, while Testers will only be able to view resources, and Project Managers will have restricted access to specific reports without the ability to modify any resources.

Question 25

A company is monitoring its Azure resources and wants to set up alerts to notify the operations team when the CPU usage of their virtual machines exceeds a certain threshold. They decide to implement an alert rule that triggers when the average CPU percentage over a 5-minute period exceeds 80%. If the company has 10 virtual machines, each with a maximum CPU capacity of 4 vCPUs, what is the total CPU capacity in percentage that would trigger an alert if the average CPU usage across all virtual machines exceeds this threshold?

Accepted Answer

3.2

Question 26

In a cloud-based networking environment, a company is evaluating the benefits of implementing Azure Virtual Network (VNet) peering to enhance its network architecture. The company has two separate VNets in different regions, and they want to ensure low-latency communication between them while maintaining security and isolation. Which of the following benefits of VNet peering would be most advantageous for this scenario?

Accepted Answer

It allows for direct, high-speed connectivity between the two VNets without the need for a public internet connection.

Question 27

A global e-commerce company is experiencing latency issues for users accessing their website from various regions around the world. To enhance performance and reduce load times, the company decides to implement Azure Content Delivery Network (CDN). They want to ensure that their static content, such as images and scripts, is cached effectively while also maintaining security and compliance with data regulations. Which configuration should they prioritize to achieve optimal performance and security for their CDN implementation?

Accepted Answer

Enable geo-filtering to restrict access to content based on user location and configure HTTPS for secure content delivery.

Question 28

A global e-commerce company is experiencing latency issues for users accessing their website from various regions around the world. To enhance performance and reduce load times, the company decides to implement Azure Content Delivery Network (CDN). They want to ensure that their static content, such as images and scripts, is cached effectively while also maintaining security and compliance with data regulations. Which configuration should they prioritize to achieve optimal performance and security for their CDN implementation?

Accepted Answer

Enable geo-filtering to restrict access to content based on user location and configure HTTPS for secure content delivery.

Question 29

A company is experiencing intermittent connectivity issues in its Azure virtual network. The network administrator decides to implement a network monitoring tool to analyze traffic patterns and identify potential bottlenecks. Which of the following tools would be most effective in providing real-time insights into the network performance, including metrics such as latency, packet loss, and throughput?

Accepted Answer

Azure Network Watcher

Question 30

A cloud administrator is tasked with setting up alerts for a virtual network in Azure to monitor traffic anomalies and ensure compliance with security policies. The administrator wants to create an alert that triggers when the number of denied inbound traffic attempts exceeds a certain threshold within a specified time frame. If the threshold is set to 100 denied attempts within a 5-minute window, what is the best approach to configure this alert using Azure Monitor?

Accepted Answer

Create a metric alert based on the "Network Security Group (NSG) flow logs" and set the condition to trigger when the count of denied inbound traffic exceeds 100 in the last 5 minutes.

Microsoft AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Free Practice Test — 30 Questions

A lot more is already mapped out

About the Microsoft AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Certification