[Q29-Q47] Tested Material Used To AZ-700 Test Engine Exam Questions in here [May-2026]

May 2, 2026 admin 0 Comments

4/5 - (1 vote)

Tested Material Used To AZ-700 Test Engine Exam Questions in here [May-2026]

Penetration testers simulate AZ-700 exam PDF

The Designing and Implementing Microsoft Azure Networking Solutions certification exam is ideal for network architects, network engineers, and other IT professionals who are responsible for designing and implementing Azure networking solutions. AZ-700 exam covers a wide range of topics, including designing secure networks, implementing virtual networks, configuring network security groups, and configuring VPN gateways. Successful candidates will be able to design and implement Azure networking solutions that meet the needs of their organization and ensure the security and reliability of their network infrastructure.

To prepare for the Microsoft AZ-700 exam, you can take advantage of the various resources provided by Microsoft, including free online training courses, study guides, and practice exams. You can also join online communities and forums to connect with other professionals who are preparing for the exam and share your knowledge and experience.

NEW QUESTION 29
You create NSG10 and NSG11 to meet the network security requirements.
For each of the following statements, select Yes it the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation:
No
subnet1(WM1->NSG1 outbound->NSG10 outbound)->subnet2(NSG1 inbound->NSG11 inbound->VM2) Yes NSG10 blocks ICMP from VNet4 (source 10.10.0.0/16) but it is not blocked from VM2’s subnet (VNet1
/Subnet2).
No
NSG11 blocks RDP (port TCP 3389) destined for ‘VirtualNetwork#’. VirtualNetwork is a service tag and means the address space of the virtual network (VNet1) which in this case is 10.1.0.0/16. Therefore, RDP traffic from subnet2 to anywhere else in VNet1 is blocked.

NEW QUESTION 30
You have two Azure subscriptions named Subscnption1 and Subscription2. Subscription1 contains a virtual network named Vnet1. Vnet1 contains an application server. Subscription2 contains a virtual network named Vnet2.
You need to provide the virtual machines in Vnet2 with access to the application server in Vnet1 by using a private endpoint.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:

NEW QUESTION 31
You have two Azure virtual networks named Hub1 and Spoke1. Hub1 connects to an on-premises network by using a Site-to-Site VPN connection.
You are implementing peering between Hub1 and Spoke1.
You need to ensure that a virtual machine connected to Spoke1 can connect to the on-premises network through Hub1.
How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#virtual-network-peering

NEW QUESTION 32
You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You plan to enable the following:
* TLS inspection
* Threat intelligence
* A network intrusion detection and prevention system (IDPS)
What can you enable by using AzFW1?

TLS inspection only

threat intelligence only

TLS inspection and the IDPS only

threat intelligence and the IDPS only

TLS inspection, threat intelligence, and the IDPS

NEW QUESTION 33
You have the Azure environment shown in the exhibit.

You have virtual network peering between Vnet1 and Vnet2. You have virtual network peering between Vnet4 and Vnet5. The virtual network peering is configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 34
You need to prepare Vnet1 for the deployment of an ExpressRoute gateway. The solution must meet the hybrid connectivity requirements and the business requirements.
Which three actions should you perform in sequence for Vnet1? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Set the subnet mask of GatwaysSubnet to/27.
2 – Assign a user defined route to GatewaySubnet.
3 – Create a VPN gateway by using the Basic SKU.
Topic 1, Litware. Inc
Existing Environment:
Hybrid Environment
The on-prernises network contains an Active Directory forest named litwareinc.com that syncs to an Azure Active Directory (Azure AD) tenant named litwareinc.com by usinq Azure AD Connect.
All the offices connect to a virtual network named Vnetl by using a Site-to-Site VPN connection.
Azure Environment
Litware has an Azure subscription named Sub1 that is linked to the litwareinc.com Azure AD tenant. Sub1 contains resources in the East US Azure region as shown in the following table.

There is bidirectional peering between Vnet1 and Vnet2. There is bidirectional peering between Vnet1 and Vnet3. Currently, Vnet2 and Vnet3 cannot communicate directly.
Requirements:
Business Requirements
Litware wants to minimize costs whenever possible, as long as all other requirements are met.
Virtual Networking Requirements
Litware identifies the following virtual networking requirements:
* Direct the default route of 0.0.0.0/0 on Vnet2 and Vnet3 to the Boston datacenter over an ExpressRoute circuit.
* Ensure that the records in the cloud.litwareinc.com zone can be resolved from the on-premises locations.
* Automatically register the DNS names of Azure virtual machines to the cloud.litwareinc.com zone.
* Minimize the size of the subnets allocated to platform-managed services.
* Allow traffic from VMScaleSet1 to VMScaleSet2 on the TCP port 443 only.
Hybrid Networking Requirements
Litware identifies the following hybrid networking requirements:
* Users must be able to connect to Vnet1 by using a Point-to-Site (P2S) VPN when working remotely. Connections must be authenticated by Azure AD.
* Latency of the traffic between the Boston datacenter and all the virtual networks must be minimized.
* The Boston datacenter must connect to the Azure virtual networks by using an ExpressRoute FastPath connection.
* Traffic between Vnet2 and Vnet3 must be routed through Vnet1.
PaaS Networking Requirements
Litware identifies the following networking requirements for platform as a service (PaaS):
* The storage1 account must be accessible from all on-premises locations without exposing the public endpoint of storage1.
* The storage2 account must be accessible from Vnet2 and Vnet3 without exposing the public endpoint of storage2.

NEW QUESTION 35
You have an Azure subscription that contains two virtual networks named Vnet1 and Vnet2.
You register a public DNS zone named fabrikam.com. The zone is configured as shown in the Public DNS Zone exhibit.

You have a private DNS zone named fabrikam.com. The zone is configured as shown in the Private DNS Zone exhibit.

You have a virtual network link configured as shown in the Virtual Network Link exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 36
You need to implement outbound connectivity for VMScaleSet1. The solution must meet the virtual networking requirements and the business requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

1 – Create a public load balancer in the Standard SKU
2 – Create a backend pool that contains VMScaleSet1
3 – Create an outbound rule
Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/skus
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-outbound-connections#outboundrules

NEW QUESTION 37
Your company has an Azure virtual network named Vnet1 that uses an IP address space of 192.168.0.0/20.
Vnet1 contains a subnet named Subnet1 that uses an IP address space of 192.168.0.0/24.
You create an IPv6 address range to Vnet1 by using a CIDR suffix of /48.
You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company. The solution must minimize the number of additional IPv4 addresses.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation
Graphical user interface, text, application Description automatically generated

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/ipv6-overview
https://docs.microsoft.com/en-us/azure/virtual-network/ipv6-add-to-existing-vnet-powershell

NEW QUESTION 38
You have an Azure load balancer that has the following configurations:
* Name:LB1
* Location: East US 2
* SKU: Standard
* Private IP address: 10.3.0.7
* Load balancing rule: rule! (Tcp/80)
* Health probe: probe1 (Http:80)
* NAT rules; 0 inbound
The backend pool of LB1 has the following configurations:
* Name: backend I
* Virtual network: Vnet1
* Backend pool configuration: NIC
* IP version: IPv4
* Virtual machines: VM1.VM2. VM3:
You have an Azure virtual machine named VM4 that has the following network configurations:
* Network interface: vm49Sl
* Virtual network/subnet: Vnet3/Subnet3
* NIC private IP address: 10.4.0.4
* Accelerated networking: Enabled
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation:

NEW QUESTION 39
You have Azure App Service apps in the West US Azure region as shown in the following table.

You need to ensure that all the apps can access the resources in a virtual network named Vnet1 without forwarding traffic through the internet-How many integration subnets should you create?

One integration subnet is required per App Service Plan regardless of how many apps are running in the App Service Plan.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-vnet-integration

NEW QUESTION 40
You have the Azure environment shown in the exhibit.

You have virtual network peering between Vnet1 and Vnet2. You have virtual network peering between Vnet4 and Vnet5. The virtual network peering is configured as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 41
You have two Azure virtual networks named Vnet1 and Vnet2 in an Azure region that has three availability zones.
You deploy 12 virtual machines to each virtual network, deploying four virtual machines per zone. The virtual machines in Vnet1 host an app named App1. The virtual machines in Vnet2 host an app named App2.
You plan to use Azure Virtual Network NAT to implement outbound connectivity for App1 and App2.
You need to identify the minimum number of subnets and Virtual Network NAT instances required to meet the following requirements:
* A failure of two zones must NOT affect the availability of either App1 or App2.
* A failure of two zones must NOT affect the outbound connectivity of either App1 or App2.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-overview

NEW QUESTION 42
You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1. You plan to enable the following:
* TLS inspection
* Threat intelligence
* A network intrusion detection and prevention system (IDPS)
What can you enable by using AzFW1?

TLS inspection only

threat intelligence only

TLS inspection and the IDPS only

threat intelligence and the IDPS only

TLS inspection, threat intelligence, and the IDPS

NEW QUESTION 43
SIMULATION

Username and password
Use the following login credentials as needed:
– To enter your username, place your cursor in the Sign in box and click on the username below.
– To enter your password, place your cursor in the Enter password box and click on the password below.
– Azure Username: [email protected]
– Azure Password: xxxxxxxxxx
– If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
– Lab Instance: 12345678
You need to configure VNET1 to log all events and metrics. The solution must ensure that you can query the events and metrics directly from the Azure portal by using KQL.
To complete this task, sign in to the Azure portal.

NEW QUESTION 44
SIMULATION

Username and password
Use the following login credentials as needed:
– To enter your username, place your cursor in the Sign in box and click on the username below.
– To enter your password, place your cursor in the Enter password box and click on the password below.
– Azure Username: [email protected]
– Azure Password: xxxxxxxxxx
If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.
The following information is for technical support purposes only:
– Lab Instance: 12345678
You plan to configure a VPN tunnel for VNET2.
You need to ensure that all internet traffic from subnet2-1 is routed through an on-premises firewall before reaching the destination. The solution must be achieved without using dynamic routing protocols.
To complete this task, sign in to the Azure portal.

NEW QUESTION 45
You have an Azure subscription. The subscription contains 500 virtual machines that run either Windows 11 or Linux.
You need to identify which Linux virtual machines are accessible from the internet. The solution must minimize administrative effort.
What should you use, and what should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:

NEW QUESTION 46
You have an Azure subscription that contains the virtual machines shown in the following table.

Subnet1 and Subnet2 are associated to a network security group (NSG) named NSG1 that has the following outbound rule:
Priority: 100
Port: Any
Protocol: Any
Source: Any
Destination: Storage
Action: Deny
You create a private endpoint that has the following settings:
Name: Private1
Resource type: Microsoft.Storage/storageAccounts
Resource: storage1
Target sub-resource: blob
Virtual network: Vnet1
Subnet: Subnet1
For each of the following statements, select Yes of the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

NEW QUESTION 47
You have an Azure subscription that contains a single virtual network and a virtual network gateway.
You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Azure Active Directory (Azure AD).
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.