Free AZ-700 Mock Exam – Practice Online Confidently

You have an on-premises DNS server named Server1 that hosts a primary DNS zone named fabrikam.com. You have an Azure subscription that contains the resources shown in the following table.

Users on the on-premises network access resources on all the virtual networks by using a Site-to-Site (S2S) VPN. You need to deploy an Azure DNS Private Resolver solution that meets the following requirements: • Resources connected to the virtual networks must be able to resolve DNS names for fabrikam.com. • Server1 must be able to resolve the DNS names of the resources in contoso.com. • The solution must minimize costs and administrative effort. What is the minimum number of resolvers you should deploy? 

You have an Azure application gateway for a web app named App1. The application gateway allows end-toend encryption. You configure the listener for HTTPS by uploading an enterprise signed certificate. You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do? 

Your company has 40 branch offices that are linked by using a Software-Defined Wide Area Network (SDWAN). The SD-WAN uses BGP. You have an Azure subscription that contains 20 virtual networks configured as a hub and spoke topology. The topology contains a hub virtual network named Vnetl. The virtual networks connect to the SD-WAN by using a network virtual appliance (NVA) in Vnetl. You need to ensure that BGP route advertisements will propagate between the virtual networks and the SDWAN. The solution must minimize administrative effort What should you implement?

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based. You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit

You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?