AZ104-Quiz29

You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts

two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Network Watcher, you create a connection monitor.

Does this meet the goal?

You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1

hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Performance Monitor, you create a Data Collector Set (DCS).

Does this meet the goal?

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Monitor, you create a metric on Network In and Network Out.

Does this meet the goal?

You have a computer named Computer] that has a point-to-site VPN connection to an Azure virtual

network named VNet1. The point-to-site connection uses a self-signed certificate.

From Azure, you download and install the VPN client configuration package on a computer named

Computer2.

You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

Solution: On Computer2, you set the Startup type for the IPSec Policy Agent service to Automatic.

Does this meet the goal?

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are

configured as web servers.

You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.

You need to ensure that visitors are serviced by the same web server for each request.

What should you configure?

You have an Azure subscription that uses the public IP addresses shown in

the following table.

You need to create a public Azure Standard Load Balancer. Which public IP addresses can you use?

You have an Azure subscription.

You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will

use kubernet networking.

You need to restrict network traffic between the pods. What should you configure on the AKS cluster?

You have an on-premises network that contains a database server named dbserver1.

You have an Azure subscription.

You plan to deploy three Azure virtual machines. Each virtual machine will be deployed to a separate

availability zone.

You need to configure an Azure VPN gateway for a site-to-site VPN. The solution must ensure that the

virtual machines can connect to dbserver1.

Which type of public IP address SKU and assignment should you use for the gateway?

You have an on-premises datacenter and an Azure subscription.

You plan to connect the datacenter to Azure by using ExpressRoute.

You need to deploy an ExpressRoute gateway. The solution must meet the

following requirements:

-Support up to 10 Gbps of traffic.

-Support availability zones.

-Support FastPath.

-Minimize costs.

Which SKU should you deploy?

Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources:

-A web app named webapp

-A virtual network named VNET1

You need to ensure that webapp1 can connect to Share1. What should you deploy?

You plan to deploy route-based Site-to-Site VPN connections between

several on-premises locations and an Azure virtual network. Which tunneling

protocol should you use?

You have an Azure subscription that contains 20 virtual machines, a network security group (NSG)

named NSG1, and two virtual networks named VNET1 and VNET2 that are peered.

You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1.

You need to configure NSG1 to allow inbound access to the virtual machines via Bastion1.

Which port should you configure for the inbound security rule?

You have an Azure subscription that contains the virtual networks shown in the following table.

You need to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.

To which virtual networks can you deploy AF1?

You have an on-premises network.

You have an Azure subscription that contains three virtual networks named VNET1. VNET2. and VNET3. The virtual networks are peered and connected to the on-premises network. The subscription contains the virtual machines shown in the following table.

You need to monitor connectivity between the virtual machines and the on-premises network by using Connection Monitor.

What is the minimum number of connection monitors

you should deploy?

You have an Azure subscription that contains a storage account. The account stores website data.

You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the

user’s location.

What should you configure?

You have two Azure virtual machines named VM1 and VM2 that run Windows Server. The virtual

machines are in a subnet named Subnett. Subnet is in a virtual network named VNet1.

You need to prevent VM1 from accessing VM2 on port 3389.

What should you do?

You have an Azure subscription that contains the resources shown in the

following table.

All the resources connect to a virtual network named VNet1.

You plan to deploy an Azure Bastion host named Bastion1 to VNet1.

Which resources can be protected by using Bastion1?

You have an Azure subscription that contains 10 virtual machines and the resources shown in the following table.

You need to ensure that Bastion1 can support 100 concurrent SSH users. The solution must minimize administrative effort.

What should you do first?

Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office

contains datacenter.

You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region

contains a virtual network. The virtual networks are peered.

You need to connect the datacenters to the subscription. The solution must minimize network latency

between the datacenters.What should you create?

You have an Azure subscription that has the public IP addresses shown in

the following table.

You plan to deploy an Azure Bastion Basic SKU host named Bastion1.

Which IP addresses can you use?

You have an Azure subscription that contains a Recovery Services vault named Vault1.

You need to enable multi-user authorization (MAU) for Vault1.

Which resource should you create first?

You have an Azure subscription that contains a resource group named RG1 and a virtual network named

VNett1.

You plan to create an Azure container instance named container1.

You need to be able to configure DNS name label scope reuse for container.

What should you configure for container1?

You have an Azure subscription.

You plan to migrate 50 virtual machines from VMware vSphere to the subscription.

You create a Recovery Services vault.

What should you do next?

You have the Azure virtual networks shown in the following table.

Which virtual networks can you peer with VNet1?

You have an Azure subscription.

You are creating a new Azure container instance that will have the following settings:

*Container name: cont1

*SKU: Standard

OS type: Windows

*Networking type: Public

*Memory (GiB): 2.5

«Number of CPU cores: 2

You discover that the Private setting for Networking type is unavailable.

You need to ensure that cont1 can be configured to use private networking.

Which setting should you change?

You have an Azure virtual network named VNet1 that contains the following settings:

*IPv4 address space: 172.16.10.0/24

«Subnet name: Subnet1

*Subnet address range: 172.16.10.0/25

What is the maximum number of virtual machines that can connect to Subnet1?

You have an Azure subscription.

You create a routing table named RT1.

You need to add a route to RT1 that specifies the next hop IP address.

Which next hop type should you select?

You have two Azure subscriptions named Sub1 and Sub? that are linked to separate Microsoft Entra tenants.

You have the virtual networks shown in the following table.

Which virtual networks can you peer with VNet1?

You have an Azure subscription that contains a storage account named storage1.

You need to allow access to storage’ from selected networks and your home office. The solution must

minimize administrative effort.

What should you do first for storage1?

You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2.

VNet1 has a VPN gateway that uses static routing,

The on-premises network has a VPN connection that uses the VPN gateway of VNet1.

You need to configure access for users on the on-premises network to connect to a virtual machine on

VNet2. The solution must minimize costs.

Which type of connectivity should you use?

You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2.

You have a Network Virtual Appliance (NVA) named NetVA1.

You need to ensure that the traffic from VNet1 to VNet2 is inspected by using NetVA1.

What should you use?

You need to ensure that VM1 can communicate with VM4. The solution must minimize the

administrative effort. (Case Study A)

What should you do?

You are planning the move of App1 to Azure. You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1. What should you recommend?