Microsoft AZ-700 dumps - 100% Pass Guarantee!

Correct Answer:

Box 1: Get-AzLocalNetworkGateway See step 5 below.

Configure forced tunneling

1.

Create a resource group.

New-AzResourceGroup -Name 'ForcedTunneling' -Location 'North Europe'

2.

Create a virtual network and specify subnets.

3.

Create the local network gateways.

Example:

$lng1 = New-AzLocalNetworkGateway -Name "DefaultSiteHQ" -ResourceGroupName "ForcedTunneling" -Location "North Europe" -GatewayIpAddress "111.111.111.111" -AddressPrefix "192.168.1.0/24"

4.

Create the virtual network gateway.

5.

Assign a default site to the virtual network gateway. The -GatewayDefaultSite is the cmdlet parameter that allows the forced routing configuration to work, so take care to configure this setting properly.

$LocalGateway = Get-AzLocalNetworkGateway -Name "DefaultSiteHQ" -ResourceGroupName "ForcedTunneling" $VirtualGateway = Get-AzVirtualNetworkGateway -Name "Gateway1" -ResourceGroupName "ForcedTunneling" Set-AzVirtualNetworkGatewayDefaultSite -GatewayDefaultSite $LocalGateway -VirtualNetworkGateway $VirtualGateway

6.

Establish the Site-to-Site VPN connections. Details omitted.

Box 2: Set-AzVirtualNetworkGatewayDefaultSite

Reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

Correct Answer:

Box 2: One NSG

The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.

Box 1: Two custom rules

With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.

The default rules in the NSG will allow all other traffic to VMScaleSet2.

Correct Answer: B

Create a new subnet, since both Vnet and App Service are in the same region.

https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet#enable-vnet-integration

Regional VNet Integration = "If the VNet is in the same region, either create a new subnet or select an empty pre-existing subnet"

Correct Answer: D

Correct Answer(s):

Use Azure Traffic Manager - Azure Traffic Manager is a DNS-based traffic load balancer that enables you to distribute traffic optimally to services across global Azure regions, while providing high availability and responsiveness.

Traffic Manager improves application responsiveness by directing traffic to the endpoint with the lowest network latency for the client.

https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

Wrong Answers:

Use Azure Application Gateway - Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications. Application Gateway cannot distribute traffic based on network latency.

Use Azure Monitor - Azure Monitor delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. It is not a load balancer.

Use Azure Security Centre - Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in

the cloud. It is not a load balancer.

Correct Answer: C

DNS forwarding also enables DNS resolution between virtual networks, and allows your on-premises machines to resolve Azure-provided host names. In order to resolve a VM's host name, the DNS server VM must reside in the same virtual network, and be configured to forward host name queries to Azure.

The following image shows two virtual networks and an on-premises network doing DNS resolution between virtual networks.

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role- instances#name-resolution-that-uses-your-own-dns-server