You have the Azure virtual networks shown in the following table. You deploy Azure Firewall to Vnet3. You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall. What should you configure?
A. peering links between Vnet1 and Vnet2
B. a route table associated to Subnet1-1 and Subnet2-1
C. an Azure private DNS zone
D. a route table associated to AzureFirewallSubnet
Question 92
You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines. You need to recommend which subnet mask size to use for the virtual subnets. What should you recommend?
A. /64
B. /120
C. /48
D. /24
Question 93
DRAG DROP - You have two on-premises datacenters. You have an Azure subscription that contains four virtual networks named VNet1, VNet2, VNet3, and VNet4. You create an Azure virtual WAN named VWAN1. VWAN1 contains a single virtual hub that is connected to both on-premises datacenters and all the virtual networks in a full mesh topology. You create a route table named RT1. You need to configure VWAN1 to meet the following requirements: • Connectivity between VNet1 and VNet2 and both on-premises datacenters must be allowed. • Connectivity between VNet3 and VNet4 and both on-premises datacenters must be allowed. • VNet1 and VNet2 must be isolated from VNet3 and VNet4. How should you configure routing for VNet1 and VNet2 and for both on-premises datacenters? To answer, drag the appropriate route tables and route table propagation to the correct requirements. Each route table and route table propagation may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Question 94
You are planning the IP addressing for the subnets in Azure virtual networks. Which type of resource requires IP addresses in the subnets?
A. Azure Virtual Network NAT
B. service endpoint policies
C. internal load balancers
D. virtual network peering
Question 95
HOTSPOT - You have an Azure subscription that contains an Azure key vault named Vault1 and an app registration for an Azure AD app named App1. You have a DNS domain named contoso.com that is hosted by a third-party DNS provider. You plan to deploy App1 by using Azure App Service. App1 will have the following configurations: • App1 will be hosted across five App Service apps. • Users will access App1 by using a URL of https://app1.contoso.com. • The user traffic of App1 will be managed by using Azure Front Door. • The traffic between Front Door and the App Service apps will be sent by using HTTP. • App1 will be secured by using an SSL certificate from a third-party certificate authority (CA). You need to support the Front Door deployment. Which two DNS records should you create, and to where should you import the SSL certificate for App1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 96
You have an Azure subscription that contains a virtual network named VNet1. VNet1 has a subnet mask of/24. You plan to implement an Azure application gateway that will have the following configurations: • Public endpoints: 1 • Private endpoints: 1 • Minimum instances: 1 • Maximum instances: 10 You need to configure the address space for the subnet of the application gateway. The solution must minimize the number of IP addresses allocated to the application gateway subnet. What is the minimum number of assignable IP addresses required?
A. 1
B. 2
C. 11
D. 12
E. 20
Question 97
HOTSPOT - Your on-premises network contains a server named DNS1 that runs Windows Server 2022. DNS1 has the DNS server role and an IP address of 10.1.0.1. The network contains computers that use DNS1 for name resolution. You have an Azure subscription that contains the resources shown in the following table. The on-premises network connects to Vnet1 by using a Site-to-Site VPN. You need to ensure that the computers on the on-premises network can resolve the IP address for sql1.private.fabrikam.com. What should you do on DNS1 and DNS2? To answer, drag the appropriate actions to the correct servers. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
Question 98
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled. You configure the application gateway to direct traffic to the URL of the application gateway. You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error. You need to ensure that the URL is accessible through the application gateway from any IP address. Solution: You configure a custom cookie and an exclusion rule. Does this meet the goal?
A. Yes
B. No
The log shows that WAF rule with ruleId 920300 was trigged. Instead we should disable the WAF rule that has a ruleId 920300. Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/web-application-firewall-troubleshoot
Question 99
HOTSPOT - You have an Azure subscription that contains the route tables and routes shown in the following table. The subscription contains the subnets shown in the following table. The subscription contains the virtual machines shown in the following table. There is a Site-to-Site VPN connection to each local network gateway. For each of the following statements, select Yes of the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
HOTSPOT - You have an Azure subscription that contains the route tables and routes shown in the following table. The subscription contains the subnets shown in the following table. The subscription contains the virtual machines shown in the following table. The subscription contains the local network gateways shown in the following table. There is a Site-to-Site VPN connection to each local network gateway. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
