SIMULATION - You need to ensure that only devices connected to a 131.107.0.0/16 subnet can access data in the rg1lod28681041 Azure Storage account. To complete this task, sign in to the Azure portal.
Question 402
HOTSPOT - You have an Azure Subscription that is connected to an on-premises datacenter and contains the resources shown in the following table. You need to configure virtual network service endpoints for VNet1 and VNet2. The solution must meet the following requirements: • The virtual machines that connect to the subnet of VNet1 must access storage1, storage2, and Azure AD by using the Microsoft backbone network. • The virtual machines that connect to the subnet of VNet2 must access storage1 and KeyVault1 by using the Microsoft backbone network. • The virtual machines must use the Microsoft backbone network to communicate between VNet1 and VNet2. How many service endpoints should you configure for each virtual network? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 403
You have an Azure subscription that contains the resources shown in the following table. You plan to deploy an Azure Private Link service named APL1. Which resource should you reference during the creation of APL1.
Question 404
DRAG DROP - You have an on-premises datacenter. You have an Azure subscription that contains a virtual machine named VM1. VM1 is connected to a virtual network named VNet1. VNet1 is connected to the on-premises datacenter by using a Site-to-Site (S2S) VPN. You plan to create an Azure storage account named storage1 and deploy an Azure web app named App1. You need to ensure that network communication to each resource meets the following requirements: • Connections to App1 must be allowed only from corporate network NAT addresses. • Connections from VNet1 to storage1 must use the Microsoft backbone network. • The solution must minimize costs. What should you configure for each resource? To answer, drag the appropriate components to the correct resources. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Question 405
You have an Azure subscription that contains the subnets shown in the following table. The subscription contains an Azure web app named WebApp1 that has the following configurations: • Region: West US • Virtual network: VNet1 • VNet integration: Enabled • Outbound subnet: Subnet11 • Windows plan (West US): ASP1 You plan to deploy an Azure web app named WebApp2 that will have the following settings: • Region: West US • VNet integration: Enabled • Windows plan (West US): ASP1 To which subnets can you integrate WebApp2?
Question 406
You have an Azure subscription. You need to deploy an Azure virtual WAN to meet the following requirements: • Create three secured virtual hubs located in the East US, West US, and North Europe Azure regions. • Ensure that security rules sync between the regions. What should you use?
Question 407
HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. VNet1 connects to a remote site by using a Site-to-Site (S2S) VPN that uses forced tunneling. VNet1 contains the subnets shown in the following table. The SQL subnet contains SQL1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Question 408
You have an Azure subscription that contains an Azure web app named App1 and a virtual machine named VM1. VM1 runs Microsoft SQL Server and is connected to a virtual network named VNet1. App1, VM1, and VNet1 are in the US Central Azure region. You need to ensure that App1 can connect to VM1. The solution must minimize costs. What should you include in the solution?
Question 409
HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the subnets shown in the following table. You plan to create an Azure web app named WebApp2 that will have the following configurations: • Region: East US • VNet integration: Enabled • Scale out: Autoscale to up to 10 instances For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Question 410
DRAG DROP - You have an Azure subscription. You plan to implement Azure DDoS Protection. The solution must meet the following requirements: • Provide access to DDoS rapid response support during active attacks. • Protect Basic SKU public IP addresses. You need to recommend which type of DDoS Protection to use for each requirement. What should you recommend? To answer, drag the appropriate DDoS Protection types to the correct requirements. Each DDoS Protection type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
