Free Microsoft AZ-700 Exam Questions

Question 1

You have an Azure application gateway for a web app named App1. The application gateway allows end-toend encryption. You configure the listener for HTTPS by uploading an enterprise signed certificate. You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do?

A : Set Listener type to Multi site.

B : Increase the Unhealthy threshold setting in the custom probe.

C : Upload the public key certificate to the HTTPS settings.

D : Enable the SSL profile for the listener.

Answer: C

Question 2

You have two Azure subscriptions named Sub1 and Sub2. Sub1 contains a virtual machine named VM1. You plan to make VM1 available to the resources in Sub2 by using Azure Private Link. You need to ensure that the private link service can be configured to provide access to VM1. What should you configure in Sub1 first?

A : a service endpoint

B : an Azure Private DNS zone

C : a private endpoint

D : an Azure load balancer

Answer: D

Question 3

You have an Azure Web Application Firewall (WAF) policy in prevention mode that is associated to an Azure Front Door instance. You need to configure the policy to meet the following requirements: Log all connections from Australia. Deny all connections from New Zealand. Deny all further connections from a network of 131.107.100.0/24 if there are more than 100 connections during one minute. What is the minimum number of objects you should create?

A : three custom rules that each has one condition

B : one custom rule that has three conditions

C : one custom rule that has one condition

D : one rule that has two conditions and another rule that has one condition

Answer: A

Question 4

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You plan to enable the following: • TLS inspection • Threat intelligence • A network intrusion detection and prevention system (IDPS) What can you enable by using AzFW1?

A : TLS inspection only

B : threat intelligence only

C : TLS inspection and the IDPS only

D : threat intelligence and the IDPS only

E : TLS inspection, threat intelligence, and the IDPS

Answer: E

Question 5