P.S. PDFExamDumps在Google Drive上分享了免費的、最新的AZ-700考試題庫：https://drive.google.com/open?id=1En0-E1Y9_XrbQv1QpilTn7RIb5mzhXaU
我們PDFExamDumps的 Microsoft的AZ-700的考題資料是按照相同的教學大綱來來研究的，同時也不斷升級我們的培訓材料，所以我們的考試培訓資料包括試題及答案，和實際的考試相似度非常高，所以形成了我們PDFExamDumps的通過率也是非常的高，這也是不可否認的事實， 由此知道PDFExamDumps Microsoft的AZ-700考試培訓資料對考生的幫助，而且我們的價格絕對合理，適合每位IT認證的考生。
| Section | Objectives |
|---|---|
| Topic 1: Design and implement core networking infrastructure | - Virtual network design
|
| Topic 2: Design and implement private access to Azure services | - Service access controls
|
| Topic 3: Design and implement hybrid networking | - On-premises integration
|
| Topic 4: Design and implement network security and monitoring | - Network security controls
|
| Topic 5: Design and implement routing and load balancing | - Routing configuration
|
使用PDFExamDumps Microsoft的AZ-700考試認證培訓資料, 想過Microsoft的AZ-700考試認證是很容易的，我們網站設計的培訓工具能幫助你第一次嘗試通過測試，你只需要下載PDFExamDumps Microsoft的AZ-700考試認證培訓資料也就是試題及答案，很輕鬆很容易，包你通過考試認證，如果你還在猶豫，試一下我們的使用版本就知道效果了，不要猶豫，趕緊加入購物車，錯過了你將要遺憾一輩子的。
問題 #259
Task 7
You need to ensure that hosts on VNET2 can access hosts on both VNET1 and VNET3. The solution must prevent hosts on VNET1 and VNET3 from communicating through VNET2.
答案：
解題說明：
See the Explanation below for step by step instructions.
Explanation:
Here are the steps and explanations for ensuring that hosts on VNET2 can access hosts on both VNET1 and VNET3, but hosts on VNET1 and VNET3 cannot communicate through VNET2:
* To connect different virtual networks in Azure, you need to use virtual network peering. Virtual network peering allows you to create low-latency, high-bandwidth connections between virtual networks without using gateways or the internet1.
* To create a virtual network peering, you need to go to the Azure portal and select your virtual network. Then select Peerings under Settings and select + Add2.
* On the Add peering page, enter or select the following information:
* Name: Type a unique name for the peering from the source virtual network to the destination virtual network.
* Virtual network deployment model: Select Resource manager.
* Subscription: Select the subscription that contains the destination virtual network.
* Virtual network: Select the destination virtual network from the list or enter its resource ID.
* Name of the peering from [destination virtual network] to [source virtual network]: Type a unique name for the peering from the destination virtual network to the source virtual network.
* Configure virtual network access settings: Select Enabled to allow resources in both virtual networks to communicate with each other.
* Allow forwarded traffic: Select Disabled to prevent traffic that originates from outside either of the peered virtual networks from being forwarded through either of them.
* Allow gateway transit: Select Disabled to prevent either of the peered virtual networks from using a gateway in the other virtual network.
* Use remote gateways: Select Disabled to prevent either of the peered virtual networks from using a gateway in the other virtual network as a transit point to another network.
* Select Add to create the peering2.
* Repeat the previous steps to create peerings between VNET2 and VNET1, and between VNET2 and
* VNET3. This will allow hosts on VNET2 to access hosts on both VNET1 and VNET3.
* To prevent hosts on VNET1 and VNET3 from communicating through VNET2, you need to use network security groups (NSGs) to filter traffic between subnets. NSGs are rules that allow or deny inbound or outbound traffic based on source or destination IP address, port, or protocol3.
* To create an NSG, you need to go to the Azure portal and select Create a resource. Search for network security group and select Network security group. Then select Create4.
* On the Create a network security group page, enter or select the following information:
* Subscription: Select your subscription name.
* Resource group: Select your resource group name.
* Name: Type a unique name for your NSG.
* Region: Select the same region as your virtual networks.
* Select Review + create and then select Create to create your NSG4.
* To add rules to your NSG, you need to go to the Network security groups service in the Azure portal and select your NSG. Then select Inbound security rules or Outbound security rules under Settings and select + Add4.
* On the Add inbound security rule page or Add outbound security rule page, enter or select the following information:
* Source or Destination: Select CIDR block.
* Source CIDR blocks or Destination CIDR blocks: Enter the IP address range of the source or destination subnet that you want to filter. For example, 10.0.1.0/24 for VNET1 subnet 1,
10.0.2.0/24 for VNET2 subnet 1, and 10.0.3.0/24 for VNET3 subnet 1.
* Protocol: Select Any to apply the rule to any protocol.
* Action: Select Deny to block traffic from or to the source or destination subnet.
* Priority: Enter a number between 100 and 4096 that indicates the order of evaluation for this rule.
Lower numbers have higher priority than higher numbers.
* Name: Type a unique name for your rule.
* Select Add to create your rule4.
* Repeat the previous steps to create inbound and outbound rules for your NSG that deny traffic between VNET1 and VNET3 subnets. For example, you can create an inbound rule that denies traffic from
10.0.1.0/24 (VNET1 subnet 1) to 10.0.3.0/24 (VNET3 subnet 1), and an outbound rule that denies traffic from 10.0.3.0/24 (VNET3 subnet 1) to 10.0.1.0/24 (VNET1 subnet 1).
* To associate your NSG with a subnet, you need to go to the Virtual networks service in the Azure portal
* and select your virtual network. Then select Subnets under Settings and select the subnet that you want to associate with your NSG5.
* On the Edit subnet page, under Network security group, select your NSG from the drop-down list. Then select Save5.
* Repeat the previous steps to associate your NSG with the subnets in VNET1 and VNET3 that you want to isolate from each other.
問題 #260
You have the Azure App Service app shown in the App Service exhibit.
The VNet Integration settings for as12 are configured as shown in the Vnet Integration exhibit.
The Private Endpoint connections settings for as12 are configured as shown in the Private Endpoint connections exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
答案：
解題說明：
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with-vnet
問題 #261
You have an Azure subscription that contains six Azure App Service apps. The apps have an identical configuration and are deployed across multiple Azure regions.
You plan to deploy Azure Front Door to load balance traffic across the apps.
You need to ensure that the round robin load-balancing algorithm will send traffic only to a limited number App Service apps based on their proximity to a user. The solution must minimize administrative effort.
What should you modify, and what should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
答案：
解題說明：
Explanation:
問題 #262
You plan to deploy Azure Virtual WAN.
You need to deploy a virtual WAN hub that meets the following requirements:
Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection Supports 8 Gbps of ExpressRoute traffic Minimizes costs What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
答案：
解題說明：
Reference:
https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about
問題 #263
You have an Azure subscription that contain a viral network named Vnet1 and an Azure SQL database named SQL1 has a private endpoint on Vnet1.
You have a partner company named fabrikam, has an Azure subscription that contains a virtual network named Vnet1 and a virtual machine named VM1, VM1 is connected to Vnet2 You need to provide VM1 with accesss to SQL 1 by using an Azure private Link service.
What should you implement on each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content Note: Each correct selection is worth one point.
答案：
解題說明：
問題 #264
......
您可以先在網上下載PDFExamDumps為你免費提供的關於Microsoft AZ-700認證考試的練習題及答案作為嘗試，之後你會覺得PDFExamDumps給你通過考試提供了一顆定心丸。選擇PDFExamDumps為你提供的針對性培訓，你可以很輕鬆通過Microsoft AZ-700 認證考試。
最新AZ-700題庫: https://www.pdfexamdumps.com/AZ-700_valid-braindumps.html
此外，這些PDFExamDumps AZ-700考試題庫的部分內容現在是免費的：https://drive.google.com/open?id=1En0-E1Y9_XrbQv1QpilTn7RIb5mzhXaU