Page 9 of 9 · 172 total questions.
You have an Azure subscription that contains the resources shown in the following table. You need to ensure that the virtual machines can access storage1, storage2, and DB1 by using service endpoints. What is the minimum number of service endpoints you should create?
The correct answer is C. Option C: 4.
You have an Azure subscription that contains the resources shown in the following table. Subnet1 is associated with a service endpoint policy named Policy1. Policy1 specifies a single resource that references storage1. To Subnet1, you deploy an Azure Batch pool named Pool1. You need to ensure that the compute resources in Pool1 can access storage1. What should you do?
The correct answer is A. Option A: To Policy1, add a resource.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1. You plan to add a private endpoint to Subnet. You need to ensure that you can route traffic between the private endpoint and the Azure Private Link service by using a user-defined route. What should you do first on Subnet1?
The correct answer is A. Option A: Enable network policy.
You have an Azure subscription that contains the resources shown in the following table. You create a service endpoint policy that has the following settings: • Associated subnets: Subnet1 • Service: Microsoft.Storage • Scope: Single account • Resource: storage1 Which resources can VM1 access?
The correct answer is A. Option A: storage1 in the East US Azure region and its replica in the paired region.
You have the resources shown in the following table. You need to protect the virtual machines by using Azure DDoS Network Protection plans. What is the minimum number of DDoS Network Protection plans you should deploy?
The correct answer is A. Option A: 1.
You have an Azure subscription that contains a virtual network named VNet1. You plan to deploy Point-to-Site (P2S) VPN access to VNet1. You need to recommend an authentication method for the deployment. The solution must meet the following requirements: • Require the use of a FIDO2 security key • Analyze user sign-in behavior • Require a user to change their password if their sign-in behavior is identified as risky What should you recommend?
The correct answer is B. Option B: Microsoft Entra.
You need to provide access to storage1. The solution must meet the PaaS networking requirements and the business requirements. What should you include in the solution?
The correct answer is A. Option A: a private endpoint
Explanation
A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.
You need to provide access to storage2. The solution must meet the PaaS networking requirements and the business requirements. Which connectivity method should you use?
The correct answer is D. Option D: a service endpoint
Explanation
A Virtual Network Service Endpoint secures Azure service access to specific subnets over the Azure backbone.
You need to configure GW1 to meet the network security requirements for the P2S VPN users. Which Tunnel type should you select in the Point-to-site configuration settings of GW1?
The correct answer is D. Option D: OpenVPN (SSL).
You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements. Which two actions should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
The correct answer is A, B. Option A: On the peering from Vnet1, select Allow gateway transit. Option B: On the peerings from Vnet2 and Vnet3, select Use remote gateways.
What should you implement to meet the virtual network requirements for the virtual machines that connect to Vnet4 and Vnet5?
The correct answer is E. Option E: a virtual network peering
Explanation
Virtual Network Peering privately connects two VNets so resources communicate over the Azure backbone.
You need to configure the default route on Vnet2 and Vnet3. The solution must meet the virtual networking requirements. What should you use to configure the default route?
The correct answer is B. Option B: BGP route exchange.
Showing questions 161–172 of 172 · Page 9 of 9
