What is the minimum number of custom NSG rules and NSG assignments required?
HOTSPOT You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements. What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. View...
Which virtual machines can VM1 and VM4 ping successfully?
HOTSPOT Which virtual machines can VM1 and VM4 ping successfully? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. View AnswerAnswer: Explanation: Box 1: VM2, VM3 and VM4. VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3. There are...
What should you include in the solution?
You are configuring two network virtual appliances (NVAs) in an Azure virtual network. The NVAs will be used to inspect all the traffic within the virtual network. You need to provide high availability for the NVAs. The solution must minimize administrative effort. What should you include in the solution?A ....
What should you configure?
HOTSPOT You have an Azure subscription that contains a single virtual network and a virtual network gateway. You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Azure Active Directory (Azure AD). What should you...
What should you do?
HOTSPOT You need to implement name resolution for the cloud.liwareinc.com. The solution must meet the networking requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. View AnswerAnswer: Explanation: Reference: https://docs.microsoft.com/en-us/azure/dns/private-dns-autoregistration https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances
What should you provide?
You have an Azure subscription that is linked to an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The subscription contains the following resources: * An Azure App Service app named App1 * An Azure DNS zone named contoso.com * An Azure private DNS zone named private.contoso.com * A virtual...
Which three actions should you perform in sequence before you can integrate WebApp1 and Vnet1?
DRAG DROP You have an Azure subscription that contains the resources shown in the following table. The IP Addresses settings for Vnet1 are configured as shown in the exhibit. You need to ensure that you can integrate WebApp1 and Vnet1. Which three actions should you perform in sequence before you...
You create NSG10 and NSG11 to meet the network security requirements
HOTSPOT You create NSG10 and NSG11 to meet the network security requirements. For each of the following statements, select Yes it the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. View AnswerAnswer: Explanation: Yes subnet1(WM1->NSG1 outbound->NSG10 outbound)->subnet2(NSG1 inbound->NSG11 inbound- >VM2) Yes NSG10 blocks ICMP...
Which diagnostic log should you review?
You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?A . IKEDiagnosticLogB . GatewayDiagnosticLogC . TunnelDiagnosticLogD . RouteDiagnosticLogView AnswerAnswer: A Explanation: Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics IKEDiagnosticLog...
Which Tunnel type should you select in the Point-to-site configuration settings of GW1?
You need to configure GW1 to meet the network security requirements for the P2S VPN users. Which Tunnel type should you select in the Point-to-site configuration settings of GW1?A . IKEv2 and OpenVPN (SSL)B . IKEv2C . IKEv2 and SSTP (SSL)D . OpenVPN (SSL)E . SSTP (SSL)View AnswerAnswer: D Explanation:...