MicrosoftProfessional levelAZ-700

AZ-700 exam dumps: 310 free Azure Network Engineer Associate practice questions

Free AZ-700 practice questions for the Designing and Implementing Microsoft Azure Networking Solutions exam, with the correct answer and a full explanation for every option. Read the first 10 below, browse all 310 by number, or take a timed practice exam.

Question bank last updated May 2025

Start timed practice exam Browse all 310 questions

Free AZ-700 practice questions

Questions 1 to 10 of 310

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

AZ-700 Question 1

Select 2

You are designing a new Azure Virtual Network for a multi-tier application consisting of front-end, business logic, and database subnets. Your on-premises network uses 192.168.0.0/16, and an upcoming project will require site-to-site VPN connectivity between on-premises and Azure. You also plan to deploy domain controllers in the Azure VNet that must have static private IP addresses. Which two design considerations should you implement to avoid address conflicts and ensure optimal IP address management?

  1. A

    Use 192.168.0.0/16 for your Azure VNet to match the on-premises address space for easy integration.

  2. B

    Choose a non-overlapping address space such as 10.1.0.0/16, and segment it into appropriately sized subnets for each application tier.

  3. C

    Use a /24 subnet for each tier and assign static IP addresses to domain controllers from the DHCP dynamic allocation pool for simplicity.

  4. D

    Exclude static IP addresses for domain controllers from the dynamic allocation range and configure them within the same subnet.

Show answer and explanation

Correct answers: B, D

Explanation

When designing IP schemes for Azure VNets, you must avoid overlapping address spaces with on-premises networks to enable smooth connectivity via site-to-site VPN. Azure best practices recommend selecting a distinct address block and then subdividing it into subnets sized for your workloads� current and future needs. Additionally, any static IP addresses (for domain controllers or other critical VMs) should be excluded from the subnet� DHCP allocation to prevent potential IP conflicts. For more details, refer to the official Microsoft documentation: https://learn.microsoft.com/azure/virtual-network/virtual-networks-address-spaces-overview.

  • A. Incorrect.

    Option 1 is incorrect. Reusing the on-premises IP range (192.168.0.0/16) for Azure leads to an overlap when you set up site-to-site VPN. This prevents proper routing between on-premises and Azure.

  • B. Correct.

    Option 2 is correct. Selecting a non-overlapping address space (e.g., 10.1.0.0/16) prevents conflict with on-premises networks. Creating multiple subnets provides logical separation and sufficient capacity for future growth.

  • C. Incorrect.

    Option 3 is incorrect. While using /24 subnets is a common approach, assigning static IP addresses from inside the DHCP dynamic range increases the risk of IP conflicts and is not aligned with best practices.

  • D. Correct.

    Option 4 is correct. Reserving static IP addresses outside the subnet� dynamic allocation range ensures there is no conflict between statically assigned IP addresses and automatically allocated addresses.

AZ-700 Question 2

Single answer

You are designing an IP address space for a new multi-tier application hosted in Azure. Your on-premises environment already uses the 10.0.0.0/8 address range. You want to ensure that all Azure resources will be reachable from on-premises without IP conflicts and leave room for future expansions. Which address space should you assign to your new Azure Virtual Network?

  1. A

    10.0.0.0/16

  2. B

    172.16.0.0/16

  3. C

    192.168.0.0/24

  4. D

    10.12.0.0/24

Show answer and explanation

Correct answer: B

Explanation

When creating an Azure Virtual Network that must integrate with an on-premises environment, it is critical to select an address range that does not overlap with any existing private ranges on-prem. Since 10.0.0.0/8 is fully utilized on-premises, choosing 172.16.0.0/16 avoids conflicts and provides a sufficiently large IP range for future subnets or workloads. For more details, refer to Microsoft documentation on Azure Virtual Network address space planning (https://learn.microsoft.com/azure/virtual-network/virtual-networks-address-space).

  • A. Incorrect.

    Option A: 10.0.0.0/16. This falls within the existing on-premises range (10.0.0.0/8), so it would cause overlapping address issues.

  • B. Correct.

    Option B: 172.16.0.0/16. This is a private address space that does not overlap with 10.0.0.0/8, offering enough addresses for scalable workloads.

  • C. Incorrect.

    Option C: 192.168.0.0/24. While it is a valid private address space, /24 might be too small if you anticipate many subnets or large workloads.

  • D. Incorrect.

    Option D: 10.12.0.0/24. This also resides within 10.0.0.0/8 and would conflict with the on-premises range.

AZ-700 Question 3

Single answer

You are designing an Azure Virtual Network (VNet) for a multi-tier application. Your on-premises data center currently uses 10.0.0.0/16, but there are plans to expand this to the broader 10.0.0.0/8 range in the future. You need to ensure that your Azure VNet has sufficient IP space to segment front-end, middle-tier, and database subnets while avoiding any overlapping IP addresses with on-premises networks, both now and after the expansion. Which address space should you choose for your Azure VNet?

  1. A

    A. 10.0.10.0/16

  2. B

    B. 10.10.0.0/16

  3. C

    C. 172.16.0.0/12

  4. D

    D. 192.168.0.0/16

Show answer and explanation

Correct answer: C

Explanation

When planning Azure VNet address spaces, one of the key considerations is avoiding overlap with existing or future on-premises IP ranges. Although both 172.16.0.0/12 and 192.168.0.0/16 could be used, 172.16.0.0/12 provides a larger non-overlapping range for segmenting multiple tiers (front-end, middle-tier, and database). Microsoft documentation recommends reserving non-overlapping IP spaces especially when future expansion is a concern. Reference: 'Designing IP addressing for Azure VNets' in Microsoft Learn.

  • A. Incorrect.

    A. 10.0.10.0/16 uses the 10.0.x.x space, which is already in use and planned to expand to /8 in the future. This would create overlapping addresses over time, making it an incorrect choice.

  • B. Incorrect.

    B. 10.10.0.0/16 is still part of the 10.x.x.x range. If on-premises expands to 10.0.0.0/8, you would eventually introduce address conflicts, making this option incorrect.

  • C. Correct.

    C. 172.16.0.0/12 falls outside the 10.x.x.x range and provides ample space for multiple subnets. It avoids the overlap problem if on-premises expands its 10.0.0.0/8 network, making this the best choice.

  • D. Incorrect.

    D. 192.168.0.0/16 is also outside the 10.x.x.x range and could work in many scenarios. However, the 172.16.0.0/12 space offers more subnetting flexibility if you need additional segments in the future. While 192.168.0.0/16 wouldn�t overlap, it might be restrictive compared to a /12 range. Option C is still the most optimal.

AZ-700 Question 4

Single answer

Your organization has deployed a three-tier application in Azure within a single virtual network (VNet) using a 10.0.0.0/16 address space. Three subnets are defined for the front-end, mid-tier, and back-end, each sized at /24. Now you need to add several new subnets for additional services and anticipate needing more IP addresses than originally planned. You want to minimize disruption to the current environment. Which action represents the best approach for handling the upcoming expansions?

  1. A

    Add new subnets as 10.0.3.0/24, 10.0.4.0/24, etc. until you exhaust the 10.0.0.0/16 space.

  2. B

    Double the VNet CIDR to 10.0.0.0/15 by removing the existing CIDR and reassigning a larger one.

  3. C

    Remove and recreate the entire VNet with a larger address space, then redeploy all resources.

  4. D

    Add a second CIDR block (e.g., 10.1.0.0/16) to the existing VNet to expand available IP space.

Show answer and explanation

Correct answer: D

Explanation

Azure supports multiple address spaces in a single VNet, providing the flexibility to add new CIDR blocks as IP demands increase. This approach avoids significant reconfiguration or redeployment. For more details, see the official Microsoft documentation on virtual network address spaces: https://learn.microsoft.com/azure/virtual-network/virtual-networks-create-vnet-arm#add-additional-address-space-after-creation

  • A. Incorrect.

    Option 1: While adding successive /24 subnets within the existing 10.0.0.0/16 is straightforward, it might be insufficient if you further expand. Once the 10.0.0.0/16 range is filled, you must redesign or add another range, potentially disrupting existing services later.

  • B. Incorrect.

    Option 2: You cannot just 'double' a VNet CIDR by swapping from a /16 to /15 without removing the existing address space. Attempting to modify the current address space in place is not supported if subnets are already in use. This could cause service downtime.

  • C. Incorrect.

    Option 3: Removing and recreating the VNet would be highly disruptive. All dependent resources, such as virtual machines, would need to be redeployed. This is rarely a recommended approach in production environments.

  • D. Correct.

    Option 4: Adding a second CIDR to the existing VNet (for example, 10.1.0.0/16) is the best solution. Azure allows multiple address spaces per VNet, letting you continue using current subnets without disruption while also accommodating future growth.

AZ-700 Question 5

Single answer

Your company� on-premises network uses the 10.0.0.0/16 IP range. You are tasked with creating a new Azure Virtual Network (VNet) for the engineering department. The VNet must not overlap with the on-premises range, and it should allow for future expansion of subnets. Which address space is the most appropriate for this new Azure VNet?

  1. A

    10.0.0.0/16

  2. B

    10.0.1.0/24

  3. C

    10.1.0.0/16

  4. D

    192.168.0.0/16

Show answer and explanation

Correct answer: C

Explanation

When creating a new VNet in Azure that will eventually connect to on-premises resources, it is crucial to avoid IP address overlap. Overlapping IP address spaces can prevent successful site-to-site or VPN connections and complicate routing. Azure best practices recommend planning your address space thoroughly to allow for subnet expansion and avoid future collisions. For more information, refer to the official Microsoft documentation on designing and implementing Azure VNets: https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview.

  • A. Incorrect.

    Option A (10.0.0.0/16) directly overlaps with the on-premises network, so it cannot be used if you plan to connect the VNet to the on-premises environment.

  • B. Incorrect.

    Option B (10.0.1.0/24) also falls within the 10.0.0.0/16 range used on-premises, making it unsuitable for the same reason�overlapping IP spaces.

  • C. Correct.

    Option C (10.1.0.0/16) is correct because it does not overlap with the on-premises 10.0.0.0/16 network and provides a sufficiently large block of addresses for future subnet expansion.

  • D. Incorrect.

    Option D (192.168.0.0/16) does not overlap with 10.0.0.0/16, but it may conflict with other commonly used private ranges and might impose additional routing complexities. In most cases, staying within the same 10.x range but a different subnet is simpler to manage.

AZ-700 Question 6

Single answer

You need to deploy a new three-tier application in Azure. The design requires a single virtual network (VNet) named AppVNet with the address space 10.0.0.0/16. You plan to create two subnets: a FrontEnd subnet (10.0.0.0/24) for web servers that must accept inbound HTTP traffic from the Internet and a BackEnd subnet (10.0.1.0/24) restricted to internal communication. Which of the following actions is essential to ensure the planned network configuration is valid and will allow both subnets to be created successfully?

  1. A

    Use subnet address prefixes that do not overlap with each other and fall within the VNet address space

  2. B

    Assign each subnet an address space that spans the entire 10.0.0.0/16 range

  3. C

    Enable IP forwarding on the virtual network before adding any subnets

  4. D

    Configure a service endpoint in the FrontEnd subnet to allow HTTP inbound traffic

Show answer and explanation

Correct answer: A

Explanation

When creating a virtual network in Azure, each subnet� address range must be a non-overlapping subset of the VNet� address space. The VNet (10.0.0.0/16) is subdivided into 10.0.0.0/24 and 10.0.1.0/24 for FrontEnd and BackEnd, ensuring no address conflicts. Refer to Microsoft Azure Virtual Network Subnet Planning guidelines at https://learn.microsoft.com/azure/virtual-network/virtual-networks-overview for more details.

  • A. Correct.

    Correct. Subnet address ranges must be non-overlapping and must lie entirely within the VNet address space (10.0.0.0/16). Overlapping subsets or addresses outside the VNet range prevent successful subnet creation.

  • B. Incorrect.

    Incorrect. Each subnet should have a unique sub-range within the 10.0.0.0/16 space; assigning the entire address block to each subnet would overlap and fail creation.

  • C. Incorrect.

    Incorrect. IP forwarding is an optional feature usually enabled for network virtual appliances, not a requirement for creating valid subnets.

  • D. Incorrect.

    Incorrect. Service endpoints are for secure Azure service access, not for basic inbound HTTP. A Network Security Group (NSG) rule can open HTTP inbound, but it does not affect subnet creation validity.

AZ-700 Question 7

Single answer

You are designing a new virtual network in Azure to host an ExpressRoute gateway, an Azure Bastion host, private endpoints (for Azure SQL Database and storage accounts), and an Application Gateway. You also plan to add Azure Firewall in the near future. You want to adhere to subnet naming requirements, avoid IP conflicts, and provide the required isolation for these services. Which approach should you use when creating subnets to meet these requirements?

  1. A

    Place all services in a single /16 subnet and manage access using one network security group.

  2. B

    Allocate a larger /22 subnet for the GatewaySubnet, then host the remaining services in a single /24 subnet.

  3. C

    Create distinct subnets for each service: one named GatewaySubnet for the ExpressRoute gateway, one named AzureBastionSubnet for Bastion, one for private endpoints, one for the Application Gateway, and plan a separate AzureFirewallSubnet for the firewall.

  4. D

    Deploy private endpoints, Application Gateway, and Azure Bastion together in a /25 subnet while using a /27 for the GatewaySubnet.

Show answer and explanation

Correct answer: C

Explanation

Azure guidelines and best practices specify using a dedicated 'GatewaySubnet' for the ExpressRoute or VPN gateway, 'AzureBastionSubnet' for Azure Bastion, 'AzureFirewallSubnet' for Azure Firewall, and consistently sized subnets for private endpoints and Application Gateway. This design minimizes IP conflicts, enforces logical separation, and supports future scalability. Refer to the Microsoft documentation on implementing Azure networking best practices for subnet planning and naming requirements.

  • A. Incorrect.

    Incorrect. Placing all services in a single subnet makes it difficult to isolate traffic and does not follow the required subnet naming conventions for Azure Bastion (AzureBastionSubnet) and gateways (GatewaySubnet).

  • B. Incorrect.

    Incorrect. Although setting a larger subnet for your gateway might be acceptable in some contexts, merging all remaining services into a single subnet introduces future scalability issues and goes against the recommended approach of isolating each service in its own subnet. You also need specific naming for Azure Bastion and Azure Firewall subnets.

  • C. Correct.

    Correct. Azure best practices state that each service (ExpressRoute gateway, Bastion, Application Gateway, Azure Firewall, and private endpoints) should have a dedicated subnet with adequate IP addresses. The gateway subnet must be named 'GatewaySubnet,' and the Bastion subnet must be named 'AzureBastionSubnet.' Azure Firewall also requires its own dedicated subnet, 'AzureFirewallSubnet.'

  • D. Incorrect.

    Incorrect. Consolidating multiple services (private endpoints, Application Gateway, and Azure Bastion) into a single small subnet does not follow Microsoft� recommended design. Private endpoints also often require multiple IP addresses, so a /25 might become too small as your environment grows.

AZ-700 Question 8

Select 2

You are designing a single virtual network for your organization to host several Azure services: a site-to-site VPN gateway, an Azure Bastion instance for secure VM access, an Azure Firewall for traffic inspection, and a private endpoint for Azure SQL Database. The design should follow Microsoft� best practices while minimizing the number of subnets. Which two subnet configurations should you implement?

  1. A
    1. Create a single subnet named 'ManagementSubnet' with a /24 prefix and deploy the VPN gateway, Bastion, Firewall, and the private endpoint in that subnet.
  2. B
    1. Deploy a dedicated 'GatewaySubnet' for the site-to-site VPN gateway and a dedicated 'AzureBastionSubnet' for Azure Bastion, but place Azure Firewall and the private endpoint in the same new subnet named 'FirewallPrivateSubnet'.
  3. C
    1. Deploy a dedicated 'GatewaySubnet' for the VPN gateway, a dedicated 'AzureBastionSubnet' for Azure Bastion, a dedicated 'AzureFirewallSubnet' for the Firewall, and place the private endpoint in an existing application subnet.
  4. D
    1. Deploy a dedicated 'GatewaySubnet' for the VPN gateway, a dedicated 'AzureBastionSubnet' for Azure Bastion, a dedicated 'AzureFirewallSubnet' for the Firewall, and a new subnet specifically for the private endpoint.
Show answer and explanation

Correct answers: C, D

Explanation

Both VPN gateways and Azure Bastion require dedicated subnets named 'GatewaySubnet' and 'AzureBastionSubnet' respectively. Azure Firewall also requires its own dedicated 'AzureFirewallSubnet'. Private endpoints can be placed in an existing subnet, provided that network policies such as service endpoints or network security group rules are correctly configured. In some scenarios, security or governance requirements may justify an entirely dedicated subnet for private endpoints, while other scenarios may place them in existing subnets to minimize IP overhead. Refer to Microsoft documentation on Azure VNet service constraints (https://learn.microsoft.com/azure/virtual-network/virtual-network-manage-subnet#subnet-constraints) for details on subnet requirements for each resource.

  • A. Incorrect.

    Option 1: Incorrect. Azure Bastion, Azure Firewall, and the VPN gateway each require their own dedicated subnet. Placing all services in a single subnet violates Azure� requirement for dedicated subnets, particularly for Bastion and Firewall.

  • B. Incorrect.

    Option 2: Incorrect. While creating separate subnets for the gateway and Bastion is correct, Azure Firewall also requires its own subnet named 'AzureFirewallSubnet'. Combining the Firewall and the private endpoint in a single subnet is not a recommended practice.

  • C. Correct.

    Option 3: Correct. Each service (VPN gateway, Bastion, Firewall) is placed in its dedicated subnet according to Azure requirements. Private endpoints can reside in an existing application subnet if it is properly configured, minimizing the creation of additional subnets.

  • D. Correct.

    Option 4: Correct. This option follows all best practices by providing dedicated subnets for the VPN gateway, Bastion, and Firewall, plus a segregated subnet for the private endpoint if further isolation is desired.

AZ-700 Question 9

Select 3

You are designing a virtual network for a new Azure NetApp Files deployment. You need to create a dedicated subnet for your NetApp volumes. Before creating the volumes, you must ensure the subnet is properly delegated and meets all requirements. Which three actions must you perform to successfully create a new Azure NetApp Files volume in the subnet?

  1. A

    Remove any existing resources referencing the subnet so that the subnet is empty.

  2. B

    Enable the Microsoft.Storage service endpoint on the subnet.

  3. C

    Assign the 'Microsoft.NetApp/volumes' delegation to the subnet.

  4. D

    Configure the subnet to have a /28 or larger address space (e.g., /27).

  5. E

    Add a service endpoint for Microsoft.Sql to the subnet.

Show answer and explanation

Correct answers: A, C, D

Explanation

Azure NetApp Files requires a dedicated, delegated subnet that is empty (no existing resources) and has an address space of at least /28. You configure the delegation by selecting 'Microsoft.NetApp/volumes' in the subnet settings. Refer to the Azure NetApp Files documentation (https://learn.microsoft.com/azure/azure-netapp-files/azure-netapp-files-create-volumes) for specifics on subnet requirements, delegation, and best practices.

  • A. Correct.

    Correct. Azure NetApp Files requires a dedicated, empty subnet with no other resources or dependencies. Existing resources (e.g., VM NICs, other services) must be removed before delegation.

  • B. Incorrect.

    Incorrect. Azure NetApp Files does not require, nor recommend, enabling the Microsoft.Storage service endpoint on the delegated subnet. Doing so can cause conflicts.

  • C. Correct.

    Correct. You must assign the 'Microsoft.NetApp/volumes' delegation so that Azure NetApp Files can properly manage and deploy volumes in this subnet.

  • D. Correct.

    Correct. Azure NetApp Files requires a minimum subnet size of /28 or larger (meaning /27, /26, etc.) to provide sufficient IP addresses for management and volume operations.

  • E. Incorrect.

    Incorrect. There's no requirement for enabling a Microsoft.Sql service endpoint for Azure NetApp Files, and adding irrelevant service endpoints can cause confusion and potential conflicts.

AZ-700 Question 10

Select 2

You plan to deploy multiple container groups using Azure Container Instances (ACI) in a virtual network for an internal application. The container groups must communicate with a backend database service running in the same virtual network. You decide to create a delegated subnet for ACI. Which two actions are required to ensure the subnet is correctly delegated for Azure Container Instances? (Choose two.)

  1. A

    Specify 'Microsoft.ContainerInstance/containerGroups' as the delegated service for the subnet.

  2. B

    Enable a Microsoft.ContainerRegistry service endpoint on the delegated subnet.

  3. C

    Place the delegated subnet in the same region and subscription as the container group deployment.

  4. D

    Attach a network security group that blocks all inbound and outbound traffic.

Show answer and explanation

Correct answers: A, C

Explanation

For Azure Container Instances to run in a virtual network, you need to delegate a subnet by specifying 'Microsoft.ContainerInstance/containerGroups' as the service. Additionally, the subnet must be in the same region and subscription as the container group to avoid deployment errors. Blocking all traffic with a network security group would prevent any necessary communications, and enabling a Microsoft.ContainerRegistry service endpoint is unrelated to the delegation requirement. For more details, refer to Microsoft� official documentation on Azure Container Instances and subnet delegation: https://learn.microsoft.com/azure/container-instances/container-instances-vnet#subnet-delegation.

  • A. Correct.

    Correct. When configuring subnet delegation for Azure Container Instances, you must set the delegated service to 'Microsoft.ContainerInstance/containerGroups.' This ensures that the subnet is specifically reserved for ACI usage.

  • B. Incorrect.

    Incorrect. Enabling a service endpoint for Azure Container Registry on the subnet is not a requirement for subnet delegation to ACI. Service endpoints are used for controlling traffic to specific Azure services, but this is not mandatory for basic ACI network connectivity.

  • C. Correct.

    Correct. The subnet used for ACI must reside in the same region and subscription as the container group deployment. A mismatch in region or subscription can cause deployment failures.

  • D. Incorrect.

    Incorrect. While you can use network security groups with ACI, blocking all inbound and outbound traffic would prevent the container group from communicating with the internal backend database or any external service. This does not fulfill the requirement of allowing traffic within the virtual network.

Timed practice exam

Take a AZ-700 practice test under exam conditions

70 questions in 100 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

What the AZ-700 exam covers

Official Designing and Implementing Microsoft Azure Networking Solutions exam domains and weightings.

  • Design and Implement Core Networking Infrastructure

    25% of exam

  • Design and Implement Routing

    25% of exam

  • Secure and Monitor Networks

    15% of exam

  • Design and Implement Private Access to Azure Services

    20% of exam

All 310 AZ-700 practice questions

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them.

  1. 1.You are designing a new Azure Virtual Network for a multi-tier application consisting of front-end, business...
  2. 2.You are designing an IP address space for a new multi-tier application hosted in Azure. Your on-premises...
  3. 3.You are designing an Azure Virtual Network (VNet) for a multi-tier application. Your on-premises data center...
  4. 4.Your organization has deployed a three-tier application in Azure within a single virtual network (VNet) using...
  5. 5.Your company� on-premises network uses the 10.0.0.0/16 IP range. You are tasked with creating a new Azure...
  6. 6.You need to deploy a new three-tier application in Azure. The design requires a single virtual network (VNet)...
  7. 7.You are designing a new virtual network in Azure to host an ExpressRoute gateway, an Azure Bastion host,...
  8. 8.You are designing a single virtual network for your organization to host several Azure services: a...
  9. 9.You are designing a virtual network for a new Azure NetApp Files deployment. You need to create a dedicated...
  10. 10.You plan to deploy multiple container groups using Azure Container Instances (ACI) in a virtual network for...
  11. 11.Your organization is deploying multiple Azure resources, including Azure Firewall, private endpoints for a...
  12. 12.You are designing a single Azure virtual network (VNet1) to host Azure Bastion, Azure Firewall, and a set of...
  13. 13.Your company plans to host several public-facing workloads in Azure and wants to ensure that all public IP...
  14. 14.You are designing a solution for a new web application that requires multiple static public IP addresses. To...
  15. 15.Your company plans to deploy a set of web services in Azure that must use public endpoints from a contiguous...
  16. 16.You are designing an Azure solution for a multi-tier web application with six front-end nodes. The...
  17. 17.You administer the Azure environment for a multinational organization that wants to bring its own public IP...
  18. 18.Contoso owns a public IP address range allocated by a regional internet registry (RIR). They plan to host a...
  19. 19.You are deploying a new internet-facing service in Azure. The service needs a stable IP address for DNS...
  20. 20.You are deploying a mission-critical web application on an Azure VM that requires a stable public IP address...
  21. 21.You manage an Azure Virtual Machine (VM) that hosts a public-facing application. Currently, the VM uses a...
  22. 22.You manage a web application hosted on an Azure Virtual Machine. The VM was provisioned with a dynamic public...
  23. 23.Your organization hosts a production web application on Azure VMs using a Basic public IP address that is...
  24. 24.You manage an Azure environment that includes a production VM with a Basic SKU public IP address assigned to...
  25. 25.You have an Azure environment with two virtual networks, VNetA and VNetB, which are peered. A domain...
  26. 26.You work for Contoso Pharmaceuticals, which maintains an on-premises Windows-based DNS server authoritative...
  27. 27.You are designing name resolution for a new multi-tier application hosted entirely within a single Azure...
  28. 28.You have an on-premises environment with an Active Directory domain named contoso.com and an internal domain...
  29. 29.You manage an Azure environment that hosts a Virtual Network (VNet) named VNetProd. The environment includes...
  30. 30.You have created a new Azure Virtual Network (vNet-Prod) and set up a Site-to-Site VPN to your on-premises...
  31. 31.Your company owns the domain contoso.com, which is registered and hosted by a third-party provider. You want...
  32. 32.You are designing the public DNS solution for a company that owns the registered domain contoso.com with a...
  33. 33.You are designing name resolution for two Azure virtual networks (EastVNet and WestVNet) that each host...
  34. 34.You manage an Azure environment with two virtual networks (VNet-A and VNet-B), both in the same subscription....
  35. 35.You have deployed an internal application on a private AKS cluster in Azure. The application is accessible...
  36. 36.You are a network engineer at Contoso, Inc. The company hosts a public-facing website at contoso.com and also...
  37. 37.You have an Azure private DNS zone named internal.corp. A new virtual network named VNet01 has been deployed,...
  38. 38.You are the network engineer for an organization that uses Azure. The organization has deployed a private DNS...
  39. 39.Your company hosts a private DNS zone named contoso.internal in Azure, which is linked to a virtual network....
  40. 40.Your company has deployed Azure DNS Private Resolver with both inbound and outbound endpoints to enable DNS...
  41. 41.Your organization has deployed two Azure virtual networks (VNet1 and VNet2) in different regions. VNet1...
  42. 42.Your organization has deployed a hub-and-spoke architecture in Azure. The Hub VNet contains an Azure VPN...
  43. 43.You have a hub-and-spoke network design with three spoke virtual networks (VNets) that must send traffic...
  44. 44.You are designing a hub-and-spoke Azure networking architecture. The hub VNet contains an ExpressRoute...
  45. 45.You have two Azure Virtual Networks, VNetA and VNetB, both within the same subscription and with...
  46. 46.You are an Azure network engineer for a company that has deployed two virtual networks (VNet1 and VNet2) in...
  47. 47.Your company has multiple Azure subscriptions hosting virtual networks in East US, West US, and Western...
  48. 48.Your company operates multiple virtual networks across three different subscriptions and regions. You have...
  49. 49.You manage a hub-and-spoke architecture in Azure. You have an NVA firewall in the hub and an ExpressRoute...
  50. 50.You have a virtual network (VNet) with two subnets: AppSubnet and NvaSubnet. The NvaSubnet contains a...
  51. 51.You are working for a company that has deployed an Azure Virtual Network (VNet) using a hub-and-spoke...
  52. 52.You manage an Azure Virtual Network (VNet) named 'corpVnet' with multiple subnets. You have created a custom...
  53. 53.You have an Azure virtual network (VNet) connected to your on-premises environment via a Site-to-Site VPN....
  54. 54.You manage an Azure environment that is connected to your on-premises network via a site-to-site VPN. The...
  55. 55.You manage two subnets (SubnetA and SubnetB) within the same Azure virtual network (VNet). SubnetA is...
  56. 56.You have created a site-to-site VPN connection between your on-premises network and an Azure virtual network....
  57. 57.You have designed a virtual network in Azure with an NVA (Network Virtual Appliance) for traffic inspection....
  58. 58.You are designing a hub-and-spoke network in Azure where a custom third-party network virtual appliance (NVA)...
  59. 59.You have an Azure Virtual Network containing multiple private subnets that host backend applications on...
  60. 60.You manage a private subnet running multiple Linux virtual machines (VMs) that require outbound Internet...
  61. 61.You manage an Azure virtual network (VNet) that hosts multiple application servers in a private subnet. These...
  62. 62.Your company has deployed several Azure Virtual Machines across two subnets in a single virtual network. You...
  63. 63.A company has multiple Azure Virtual Machines spread across different subnets and needs to detect abnormal...
  64. 64.You manage a multi-tier application environment in Azure that includes multiple Virtual Networks, an Azure...
  65. 65.Your company has deployed multiple Network Security Groups (NSGs) across different Azure regions, and you...
  66. 66.You are troubleshooting network traffic issues in a virtual network protected by an NSG in the West US...
  67. 67.You have deployed a multi-tier application in Azure, and requests from the front-end virtual machine to the...
  68. 68.An e-commerce application hosted on an Azure VM in the same region as your customers cannot establish secure...
  69. 69.You manage an Azure environment with virtual machines spread across two regions. Users are reporting...
  70. 70.You manage a multi-tier application deployed in Azure. The front-end virtual machine (VM) resides in one...
  71. 71.Your company hosts a web application on Azure that is frequently targeted by large-scale DDoS attacks....
  72. 72.You manage a high-traffic web application hosted on Azure Virtual Machines behind an Azure Load Balancer....
  73. 73.You are an Azure network engineer for a company that hosts multiple Windows virtual machines on Azure....
  74. 74.You are managing an Azure environment where multiple virtual machines are exposed to the internet via RDP and...
  75. 75.You manage an Azure environment with several virtual machines in a front-end subnet, which is directly...
  76. 76.Your organization hosts several Azure virtual machines (VMs) within a shared production subnet. Microsoft...
  77. 77.You are a network engineer for a company that has recently enabled Microsoft Defender for Cloud Security...
  78. 78.You are a cloud administrator for an organization that recently enabled Microsoft Defender for Cloud across...
  79. 79.Your company is expanding to a new location and needs to establish dynamic routing between the on-premises...
  80. 80.Your company has an on-premises data center that must connect securely to an Azure Virtual Network (VNet)...
  81. 81.Your company needs to set up a site-to-site VPN connection between its on-premises data center and Azure with...
  82. 82.You are designing a site-to-site VPN connection for an organization that requires continuous availability...
  83. 83.Your organization needs to connect 400 branch offices on-premises to an Azure VNet using site-to-site VPN...
  84. 84.Your company needs to connect 25 remote branch offices to a single Azure VNet using site-to-site VPN tunnels....
  85. 85.You are configuring a site-to-site VPN between your on-premises network, which has a static public IP...
  86. 86.Your company wants to establish a site-to-site VPN connection between its on-premises network (10.0.0.0/24)...
  87. 87.Your company wants to connect multiple branch offices to Azure via site-to-site VPN connections. Each branch...
  88. 88.Your company needs to connect multiple on-premises locations to an Azure Virtual Network. The network team...
  89. 89.Your company has an on-premises network originally configured with the 10.50.0.0/16 address space. You...
  90. 90.You are configuring a site-to-site VPN connection from your Azure VNet to an on-premises location. The...
  91. 91.You manage a route-based site-to-site VPN connecting your on-premises network to Azure. Your security team...
  92. 92.You have configured a site-to-site VPN between your on-premises environment and Azure. To meet strict...
  93. 93.You have created a virtual network with the required gateway subnet and deployed a VPN-type virtual network...
  94. 94.You are implementing connectivity between your on-premises datacenter and Azure for the Contoso organization....
  95. 95.You recently changed the IP ranges in your on-premises environment, and now your site-to-site VPN connection...
  96. 96.You have configured a site-to-site VPN connection from your on-premises network to an Azure Virtual Network...
  97. 97.You are migrating a legacy application server from your on-premises data center to Azure. This server must...
  98. 98.You have a legacy application that must continue using an on-premises IP address during its migration to...
  99. 99.Your company wants to implement a point-to-site VPN for remote employees to securely connect to an Azure...
  100. 100.Your organization wants to implement a secure point-to-site (P2S) VPN solution in Azure using...
  101. 101.Your organization needs a point-to-site VPN in Azure to support approximately 200 concurrent remote users....
  102. 102.A research company plans a point-to-site (P2S) VPN deployment to provide remote developers secure access to...
  103. 103.Your company� on-premises network team wants to implement a Site-to-Site VPN between the corporate data...
  104. 104.Your company needs to establish a secure site-to-site VPN connection to Azure from an on-premises firewall...
  105. 105.You manage a multi-tier application running on Azure Virtual Machines that uses Azure Key Vault to store...
  106. 106.You are a network engineer for a company that employs a globally distributed workforce needing secure remote...
  107. 107.Contoso has configured an Azure VPN Gateway to allow remote employees to connect via Point-to-Site (P2S) VPN....
  108. 108.You have deployed an Azure VPN gateway for remote users who connect to your organization� network. You need...
  109. 109.You manage a secure web application hosted behind Azure Application Gateway. The requirement is to enforce...
  110. 110.Your organization hosts an internal line-of-business web application behind an Azure Application Gateway. You...
  111. 111.Your organization recently set up an Azure VPN Gateway with a certificate-based point-to-site (P2S)...
  112. 112.Your organization has deployed an Azure Virtual Network Gateway configured for Point-to-Site VPN using...
  113. 113.Your company hosts an internal line-of-business web application on Azure App Service with Azure AD configured...
  114. 114.Your organization has deployed a line-of-business web app secured with Azure Active Directory (Azure AD)....
  115. 115.A company plans to host an Always On VPN solution in Azure to provide secure remote access for their...
  116. 116.Your organization is rolling out Always On VPN so employees can securely connect to the corporate network...
  117. 117.You are a network engineer for Contoso and need to connect a Windows Server 2019 machine in the on-premises...
  118. 118.Your organization wants to establish a secure point-to-site (P2S) VPN connection from an on-premises Windows...
  119. 119.You have set up an Azure ExpressRoute circuit for your organization to provide private connectivity from your...
  120. 120.Your organization has an existing ExpressRoute circuit with private peering in the East US region under...
  121. 121.A multinational financial institution needs a dedicated 10 Gbps connection to Microsoft Azure from their...
  122. 122.Contoso, Inc. needs a private, high-bandwidth connection directly from their on-premises data centers to...
  123. 123.A global retail enterprise needs to connect several on-premises data centers across multiple continents to...
  124. 124.Your organization has a global presence with offices in Europe, North America, and Asia that need secure,...
  125. 125.You are designing an ExpressRoute solution for a multinational organization that needs cross-region...
  126. 126.A company hosts its primary workloads in Azure� East US region and maintains a disaster recovery setup in...
  127. 127.Your organization has two on-premises data centers in different regions. Each site has an ExpressRoute...
  128. 128.Contoso has two on-premises locations: a primary data center in Dallas and a branch office in Berlin. Each...
  129. 129.Your company plans to use a single ExpressRoute circuit to connect from its on-premises data center to Azure...
  130. 130.You manage networking for a company that has just deployed multiple virtual machines in an Azure VNet and...
  131. 131.You are a network engineer at a company that has provisioned an ExpressRoute circuit with Azure private...
  132. 132.Your company wants to securely connect its on-premises data center (using the 10.10.0.0/16 network) to an...
  133. 133.Your organization has an existing ExpressRoute circuit with private peering established for Azure workloads....
  134. 134.A company has an existing ExpressRoute circuit with private peering configured. They want to connect to...
  135. 135.Your company has set up a new ExpressRoute circuit in the Azure portal and now wants to establish private...
  136. 136.You are designing a hybrid Azure solution that requires private connectivity from your on-premises data...
  137. 137.You have an existing ExpressRoute circuit with Azure private peering in place. You want to connect a new...
  138. 138.You have an existing Azure ExpressRoute circuit with private peering for your on-premises environment. You...
  139. 139.Your company has a hub-and-spoke topology in Azure with a hub virtual network (VNet) connected to on-premises...
  140. 140.Your organization has multiple subnets spread across several Azure VNets that connect to on-premises through...
  141. 141.You manage the on-premises network for a financial institution that connects to multiple Azure VNets via...
  142. 142.Your company has an existing ExpressRoute circuit established with private peering to connect the on-premises...
  143. 143.You are configuring a site-to-site VPN connection between your on-premises router and an Azure VPN gateway....
  144. 144.You have deployed an Azure Route Server in a hub virtual network to streamline dynamic routing between your...
  145. 145.Your organization has established an ExpressRoute circuit for accessing Azure services from on-premises. The...
  146. 146.You have configured a new ExpressRoute circuit for private peering to your Azure virtual network. The circuit...
  147. 147.A global manufacturing company operates branch offices in Europe and Asia with both ExpressRoute and...
  148. 148.You manage a global organization with multiple on-premises branch locations. You have configured an Azure...
  149. 149.Your company has multiple on-premises locations that you want to connect to Azure using site-to-site VPN. You...
  150. 150.You are designing a multi-region, large-scale Azure deployment that requires ExpressRoute integration,...
  151. 151.You are designing a Virtual WAN architecture for an enterprise with multiple branch offices across the globe....
  152. 152.You are designing an Azure Virtual WAN architecture for a global organization with multiple on-premises data...
  153. 153.You have an existing Virtual WAN in Azure and must create a new hub named 'HubEastUS' in the East US region...
  154. 154.You have an existing Azure Virtual WAN named ContosoVWAN in the East US region, which has a virtual hub named...
  155. 155.Contoso plans to implement both a site-to-site VPN gateway and an ExpressRoute gateway in Azure. The VPN...
  156. 156.Your organization plans to deploy a site-to-site VPN connection and an ExpressRoute circuit into Azure. The...
  157. 157.You manage a multi-site on-premises environment that needs to connect securely to an Azure Virtual WAN you...
  158. 158.Your organization has created a Virtual WAN and a hub in the East US region to connect multiple branch...
  159. 159.Your organization has an Azure Virtual WAN with a single virtual hub. There is a Site-to-Site (S2S) VPN...
  160. 160.You manage an Azure Virtual WAN environment for a multinational company with a single virtual hub in the East...
  161. 161.You are an Azure network engineer responsible for integrating a third-party network virtual appliance (NVA)...
  162. 162.You have deployed a third-party firewall as a network virtual appliance (NVA) in a spoke virtual network. You...
  163. 163.You manage a global web application with deployments in two Azure regions: East US and West Europe. Each...
  164. 164.You have deployed a multi-tier application in two different Azure regions. Each region has VMs running behind...
  165. 165.Your organization hosts a public-facing web application distributed across three Azure Availability Zones....
  166. 166.Your company hosts a three-tier web application in a single Azure region. The application� front-end must be...
  167. 167.You manage a complex environment where parts of your application require high-throughput, transport-layer...
  168. 168.You manage an internal line-of-business application running on five virtual machines (VMs) within the same...
  169. 169.You manage a microservices-based application running on Azure Virtual Machine Scale Sets in three different...
  170. 170.You are designing a production-scale application hosted in Azure that must serve incoming internet traffic to...
  171. 171.You are deploying a three-tier web application in Azure. The front-end tier provides public-facing web pages...
  172. 172.Your organization is designing a multi-tier web application in Azure. The front-end web tier must be publicly...
  173. 173.You have a mission-critical web application deployed in multiple Azure regions to serve users worldwide. You...
  174. 174.You manage an e-commerce platform deployed in two Azure regions (East US and West Europe). The platform is...
  175. 175.You have configured an internal Azure Load Balancer to distribute traffic across a pool of VMs hosting a...
  176. 176.You have deployed a Standard Public Load Balancer in a virtual network named VNet1 with a single front-end IP...
  177. 177.Your company hosts a globally distributed web application with endpoints in East US, West Europe, and...
  178. 178.You manage an e-commerce application hosted in two Azure regions: East US as the primary, and West Europe as...
  179. 179.A company wants to deploy a network virtual appliance (NVA) for firewall inspection using an Azure Gateway...
  180. 180.Your company hosts a multi-tier web application in Azure with a public load balancer accepting external...
  181. 181.You have deployed two virtual machines (VMs) in the same virtual network subnet, both hosting an HTTP-based...
  182. 182.Your company hosts a web application on three Azure VMs behind a Standard Load Balancer. The application...
  183. 183.You manage an Azure environment that hosts a public load balancer with a back-end pool of two Windows Server...
  184. 184.You manage a Standard Azure Load Balancer with three Windows Server virtual machines in its backend pool....
  185. 185.You manage an Azure Load Balancer configured with a back-end pool of virtual machines in a private subnet....
  186. 186.You have a web application running on a set of virtual machines (VMs) behind an Azure Standard Load Balancer....
  187. 187.Your company is hosting multiple microservices behind a single domain (contoso.com). Each microservice is...
  188. 188.You manage a multi-tier e-commerce application that uses an Azure App Service for the front-end. You deploy...
  189. 189.An e-commerce company plans to use Azure Application Gateway to front multiple containerized microservices...
  190. 190.An e-commerce company is deploying multiple microservices behind a single Azure Application Gateway. They...
  191. 191.A global e-commerce company is migrating its microservices-based platform to Azure. They need an...
  192. 192.Contoso is planning to build a new e-commerce website to handle user traffic for multiple product lines under...
  193. 193.You manage a critical internal application deployed on Azure Virtual Machines behind an Azure Load Balancer....
  194. 194.You manage a client-facing web application hosted on a set of Azure Virtual Machines orchestrated by a...
  195. 195.You have deployed a Standard Azure Load Balancer in the East US region to handle internal traffic for a...
  196. 196.You manage a Standard SKU Azure Load Balancer in the East US region to distribute traffic among three virtual...
  197. 197.You have an Azure Load Balancer configured to distribute incoming HTTPS traffic to a set of Azure virtual...
  198. 198.You have deployed a Standard Azure Load Balancer in front of three Linux virtual machines hosting an internal...
  199. 199.You have an existing Azure Application Gateway configured with a single-site HTTPS listener on port 443 for a...
  200. 200.You have an existing Azure Application Gateway that currently handles traffic for example.com. Your...
  201. 201.You have an Azure Virtual Network with two subnets: SubnetA (10.0.0.0/24) and SubnetB (10.0.1.0/24). SubnetB...
  202. 202.You are managing a three-tier application hosted in Azure, where the front-end tier (Subnet A) must route all...
  203. 203.You manage an Azure Application Gateway routing traffic to multiple backend web applications. Each...
  204. 204.You have deployed an Azure Application Gateway to distribute traffic to a set of backend web servers. Your...
  205. 205.You are deploying an Azure Application Gateway in front of a web application hosted on an Azure App Service...
  206. 206.You are the network engineer for an online retail platform that uses Azure Application Gateway. Your...
  207. 207.You manage a web application hosted on Azure Virtual Machines behind an Azure Application Gateway. You have...
  208. 208.You have configured a rewrite rule in Azure Application Gateway to add a custom request header...
  209. 209.You manage a global e-commerce platform with two Azure App Service instances: one in East US and another in...
  210. 210.You manage a global e-commerce platform with two Azure App Services running in East US and West Europe. You...
  211. 211.An online retailer hosts a global e-commerce platform in multiple Azure regions. They want to block malicious...
  212. 212.Contoso is building a globally distributed e-commerce site with the following requirements: (1) Requests...
  213. 213.A global e-commerce company is deploying a new web application with active-active deployments in multiple...
  214. 214.You are designing an e-commerce platform that must serve both dynamic and static content to customers across...
  215. 215.Your company is deploying a new line-of-business application that processes sensitive data. You need to...
  216. 216.Your company is launching a business-critical application in Azure that must meet regulatory requirements for...
  217. 217.Your company hosts an e-commerce web app across two Azure App Service instances in East US and West Europe....
  218. 218.You manage an Azure Front Door that routes traffic to two origins: an Azure App Service and an on-premises...
  219. 219.You are configuring an Azure Application Gateway to offload SSL at the gateway while maintaining secure...
  220. 220.You manage an Azure Application Gateway that sits in front of a set of microservices hosted on VMs. Your...
  221. 221.You manage a global e-commerce platform that hosts static product images in Azure Blob Storage behind an...
  222. 222.You are configuring Azure Front Door for a global web application that serves media-heavy static content. You...
  223. 223.Your company hosts large media files that are served to a global audience from multiple Azure regions. You...
  224. 224.You manage a global e-commerce application hosted in multiple Azure regions. Customers in Asia have reported...
  225. 225.You are designing a global e-commerce solution that uses Azure Front Door to distribute traffic for the...
  226. 226.You manage an Azure Application Gateway fronting a web application. You need to enforce secure connections...
  227. 227.You have deployed a secure web application using Azure Front Door Premium tier, and you want to ensure that...
  228. 228.You are implementing Azure Front Door to serve traffic for a static website hosted in an Azure Storage...
  229. 229.You have deployed a custom service behind a Standard Load Balancer in Azure and want to securely share this...
  230. 230.Your company hosts a custom solution on a set of Azure virtual machines behind a Standard Load Balancer. You...
  231. 231.Contoso is deploying a new solution in Azure that uses an Azure Storage account for storing application data....
  232. 232.You have an Azure Function App that needs to securely read files from an Azure Storage account and write data...
  233. 233.You manage a company� Azure Storage account named contosostorage that hosts highly sensitive data. You have...
  234. 234.You are deploying a solution that requires private connectivity between Azure Virtual Machines in a specific...
  235. 235.Your company hosts a private endpoint for an Azure Storage account in a subnet within a virtual network. You...
  236. 236.Your company deploys a private endpoint for an Azure Storage account to ensure all traffic remains within the...
  237. 237.Your organization hosts a back-end service behind a Standard Load Balancer in Azure. You want multiple...
  238. 238.You are designing a solution for a company that wants to securely expose an internal application running on...
  239. 239.You have deployed an Azure Storage account with a private endpoint in a virtual network. On-premises clients...
  240. 240.You are a network engineer for Contoso. You have an Azure Storage account configured with a private endpoint...
  241. 241.Your company hosts a web application in Azure and has created a Private Endpoint for this application. You...
  242. 242.Contoso has deployed a custom application behind a Private Link service in Azure. The on-premises network...
  243. 243.You have an Azure Virtual Network (VNet) with a subnet named SubnetA. You enable the Microsoft.Storage...
  244. 244.You have a web application running on an Azure Web App, and you need to ensure that all traffic to an Azure...
  245. 245.You are designing a solution for a company that stores sensitive data in an Azure Storage account. The...
  246. 246.You have an Azure virtual network (VNet) hosting application servers in the same region as your Azure Storage...
  247. 247.You manage an Azure environment that contains a virtual network named VNet1 and a storage account named...
  248. 248.You manage an Azure virtual network (VNet) that includes a Production subnet. You need to ensure that traffic...
  249. 249.You manage a subnet within an Azure Virtual Network that has a service endpoint for Azure Storage in the West...
  250. 250.A company has a virtual network (VNet) with a subnet named 'BackendSubnet.' They need to restrict all traffic...
  251. 251.An organization hosts an Azure virtual network with multiple subnets, including a Production subnet...
  252. 252.You have an Azure Storage account and a Virtual Network (VNet) in the same region. You want to limit storage...
  253. 253.You have an Azure VM hosting a web application. You need to ensure HTTP access (TCP port 80) is open to all...
  254. 254.You are managing a multi-tier web application hosted on Azure. The front-end VMs are located in a subnet...
  255. 255.Contoso has an Azure Virtual Network with multiple subnets hosting several Windows VMs. The security team...
  256. 256.You administer an Azure environment hosting a multi-tier application in a single Virtual Network with two...
  257. 257.You manage an Azure environment with a single virtual network containing two VMs (front-end and back-end) in...
  258. 258.You have a subnet in an Azure virtual network hosting multiple virtual machines (VMs) with different security...
  259. 259.You are designing a microservices-based application in Azure with a front-end tier (ASG-Frontend) and a...
  260. 260.You deployed multiple virtual machines (VMs) in the East US region to host a front-end application. You...
  261. 261.You have created an Application Security Group (ASG) named 'ASG-WebServers' to control traffic for a...
  262. 262.You manage a multi-tier application in Azure. You�ve created an Application Security Group (ASG) named...
  263. 263.You manage a production web server in Azure that must accept HTTPS traffic (port 443) only from the IP...
  264. 264.You are designing an Azure environment for a multi-tier application with separate web and database subnets....
  265. 265.You are managing an Azure environment that includes multiple NSGs attached to critical virtual machines. The...
  266. 266.You manage multiple Azure virtual machines protected by different Network Security Groups (NSGs). The...
  267. 267.Your organization recently deployed a web application on an Azure VM behind a Network Security Group (NSG) in...
  268. 268.You manage a mission-critical web application running on multiple Azure VMs behind Network Security Groups...
  269. 269.You are an Azure networking specialist investigating an unusual spike in outbound traffic from a VM within a...
  270. 270.Your company has enabled NSG flow logs on a Network Security Group to investigate unauthorized RDP (port...
  271. 271.You are the network engineer for a company that has deployed a Windows Server virtual machine (VM) in Azure....
  272. 272.You are an Azure network engineer responsible for diagnosing connectivity issues for a VM running a web...
  273. 273.You have an Azure Virtual Machine named VM1 (IP: 10.0.0.4) in the East US region. It needs to access an...
  274. 274.You have an Azure Linux VM in a virtual network that cannot reach an external web service. The virtual...
  275. 275.You have deployed Azure Bastion within a virtual network to securely connect to an Azure VM for RDP-based...
  276. 276.Your organization has deployed Azure Bastion to securely manage multiple Linux and Windows VMs in a dedicated...
  277. 277.You are an Azure network engineer for a large organization with multiple subscriptions. You want to ensure...
  278. 278.You are an Azure networking engineer for a global organization that spans multiple Azure subscriptions. The...
  279. 279.Your organization has multiple regional environments connected through Azure Virtual WAN. You want to...
  280. 280.Your company operates workloads across multiple Azure regions. You decide to use Azure Firewall Manager to...
  281. 281.You are designing a security solution for a corporate environment that hosts workloads in Azure. The...
  282. 282.Your organization has deployed Azure Firewall to secure traffic for a set of virtual machines in a hub-spoke...
  283. 283.Your company hosts sensitive financial applications in a hub-spoke architecture on Azure. You need a stateful...
  284. 284.A healthcare organization must comply with strict regulations that require TLS inspection on outbound traffic...
  285. 285.You are designing an Azure Firewall deployment for an organization that wants to protect multiple spoke...
  286. 286.You are designing a hub-and-spoke network in Azure, where a central hub virtual network (VNet) will host an...
  287. 287.Your company has deployed a hub-and-spoke network topology in Azure. The hub virtual network contains an...
  288. 288.You have a single Azure Virtual Network (VNet) named 'CorpVNet' with a subnet called 'ProdSubnet' hosting...
  289. 289.You have deployed an Azure Firewall in a hub virtual network (VNet), with a web server located in a spoke...
  290. 290.You have deployed Azure Firewall in a hub virtual network. Your environment includes a web server in a spoke...
  291. 291.You are a network engineer at Contoso. You've created an Azure Firewall Manager policy in the East US region...
  292. 292.You manage an environment with multiple secured virtual hubs across different Azure regions. You want to...
  293. 293.You have an existing Azure Virtual WAN environment with multiple site-to-site VPN connections from...
  294. 294.You manage a global environment connected via a single Azure Virtual WAN, where multiple branch offices and...
  295. 295.You have deployed an Azure Application Gateway with WAF (v2 SKU) to protect a mission-critical e-commerce...
  296. 296.You maintain a globally distributed e-commerce application deployed in multiple Azure regions, with Azure...
  297. 297.You are designing a solution for an e-commerce platform behind Azure Application Gateway with Web Application...
  298. 298.Your organization hosts an internal line-of-business application behind an Azure Web Application Firewall...
  299. 299.A global e-commerce platform wants to serve customers from multiple regions with low latency and high...
  300. 300.You need to design a Web Application Firewall (WAF) deployment for an organization that hosts multiple web...
  301. 301.Your organization has deployed a new web application behind an Azure Application Gateway with Web Application...
  302. 302.Your organization has an Azure Application Gateway configured with the Web Application Firewall (WAF) in...
  303. 303.You have configured a WAF policy for Azure Front Door using the default OWASP managed rule set to block...
  304. 304.Your organization has an Azure Front Door instance protecting a public website with an active Web Application...
  305. 305.You manage a web application behind an Azure Application Gateway with Web Application Firewall (WAF) enabled,...
  306. 306.You are the network engineer for a tech company that uses an Azure Application Gateway (WAF v2) to protect a...
  307. 307.You have an Azure Application Gateway configured with a Web Application Firewall (WAF) in Prevention mode....
  308. 308.You are responsible for securing an online retail application running behind an Azure Application Gateway in...
  309. 309.You have deployed an Application Gateway in Azure using the Standardv2 SKU to route traffic to multiple web...
  310. 310.You manage an e-commerce website that uses Azure Application Gateway deployed in WAF v2 SKU. You need to...

AZ-700 exam dumps FAQ

Are these AZ-700 dumps real exam questions?

No. These are original practice questions written to the Designing and Implementing Microsoft Azure Networking Solutions exam objectives, not questions copied from a live exam. Memorising leaked questions violates Microsoft's candidate agreement and stops working the moment the question pool rotates. Use this bank to check your understanding of each domain and to find the topics you still need to study.

How many AZ-700 practice questions are there?

310 questions, each with the correct answer, an explanation of the answer, and a note on why every other option is wrong. The first 10 are on this page and every question has its own page linked below.

Are the AZ-700 exam dumps free?

Yes. Every question, answer and explanation on this page and the linked question pages is free to read without an account. A free HydraNode account adds timed practice exams, scoring and progress tracking across attempts.

How do I take a timed AZ-700 practice test?

Sign in and start the Designing and Implementing Microsoft Azure Networking Solutions exam on HydraNode. A session gives you 70 questions drawn from this bank in 100 minutes, then a score report with a per-question review.

What topics does the AZ-700 exam cover?

The official exam domains are: Design and Implement Core Networking Infrastructure; Design and Implement Routing; Secure and Monitor Networks; Design and Implement Private Access to Azure Services.

More Microsoft exam dumps

All Microsoft exams
AZ-305243 questions

Azure Solutions Architect Expert exam dumps

Designing Microsoft Azure Infrastructure Solutions

AZ-400306 questions

Azure DevOps Engineer Expert exam dumps

Designing and Implementing Microsoft DevOps Solutions

AI-102493 questions

Azure AI Engineer Associate exam dumps

Designing and Implementing a Microsoft Azure AI Solution

AI-900286 questions

Azure AI Fundamentals exam dumps

Microsoft Azure AI Fundamentals

AZ-500273 questions

Azure Security Engineer Associate exam dumps

Microsoft Azure Security Technologies

AZ-104289 questions

Azure Administrator Associate exam dumps

Microsoft Certified: Azure Administrator Associate