Instant Access Microsoft.AZ-700.v2026-06-04.q156 Actual Practice Test Engine for Free (Page 31)

40%off

AZ-700 Premium Dumps

Latest AZ-700 Exam Premium Dumps provide by TrainingQuiz.com to help you Passing AZ-700 Exam! TrainingQuiz.com offers the updated AZ-700 exam dumps, the TrainingQuiz.com AZ-700 exam questions has been updated to correct Answer. Get the latest TrainingQuiz.com AZ-700 pdf dumps with Exam Engine here:

(408 Q&As Dumps, 40%OFF Special Discount: DumpsDB)

Question 146

Task 11
You need to ensure that only hosts on VNET1 can access the slcnage42150372 storage account. The solution must ensure that access occurs over the Azure backbone network.

Correct Answer:

See the Explanation below for step by step instructions.
Explanation:
To ensure that only hosts on VNET1 can access the slcnage42150372 storage account and that access occurs over the Azure backbone network, you can use Azure Private Endpoints. This method secures the connection by assigning a private IP address from your virtual network to the storage account, ensuring that traffic does not traverse the public internet.
Step-by-Step Solution
Step 1: Create a Private Endpoint for the Storage Account
* Navigate to the Azure Portal.
* Search for "Storage accounts" and select the slcnage42150372 storage account.
* In the storage account blade, select "Networking" under the "Security + networking" section.
* Under "Private endpoint connections", click on "Add private endpoint".
* Enter the following details:
* Name: Enter a name for the private endpoint (e.g., PrivateEndpoint-VNET1).
* Region: Select the same region as your virtual network (VNET1).
* Click on "Next: Resource".
Step 2: Configure the Resource
* Select "Target sub-resource": Choose the storage service you want to connect to (e.
g., blob, file, queue, table).
* Click on "Next: Virtual network".
Step 3: Select the Virtual Network and Subnet
* Select the virtual network: Choose VNET1.
* Select the subnet: Choose the appropriate subnet within VNET1.
* Click on "Next: Configuration".
Step 4: Configure DNS Integration (Optional)
* Configure DNS settings if needed to ensure proper name resolution within your virtual network.
* Click on "Next: Tags", add any tags if necessary, and then click on "Review + create".
* Review your settings and click on "Create".
Step 5: Restrict Public Network Access
* Navigate back to the storage account.
* Select "Networking" under the "Security + networking" section.
* Under "Firewalls and virtual networks", select "Selected networks".
* Ensure that only VNET1 is listed under the virtual networks section.
* Click on "Save".
Explanation:
* Private Endpoints: These provide secure connectivity to Azure services by assigning a private IP address from your VNet to the service, ensuring that traffic stays within the Azure backbone network12.
* Firewall and Virtual Networks: Configuring the storage account to allow access only from selected networks (VNET1) ensures that no other network can access the storage account3.
By following these steps, you can ensure that only hosts on VNET1 can access the slcnage42150372 storage account, and that all access occurs over the secure Azure backbone network.

Question 147

You are configuring two network virtual appliances (NVAs) in an Azure virtual network. The NVAs will be used to inspect all the traffic within the virtual network.
You need to provide high availability for the NVAs. The solution must minimize administrative effort. What should you include in the solution?

A.Azure Standard Load Balancer
B.Azure Traffic Manager
C.Azure Application Gateway
D.Azure Front Door

Question 148

You have an Azure application gateway named AppGW1 that balances requests to a web app named App1.
You need to modify the server variables in the response header of App1.
What should you configure on AppGW1?

A.HTTP settings
B.rewrites
C.rules
D.listeners

Question 149

You are planning an Azure solution that will contain the following types of resources in a single Azure region:
Virtual machine
Azure App Service
Virtual Network gateway
Azure SQL Managed Instance
App Service and SQL Managed Instance will be delegated to create resources in virtual networks.
You need to identify how many virtual networks and subnets are required for the solution. The solution must minimize costs to transfer data between virtual networks.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 150

You have an Azure subscription that contains the resources shown in the following table.

NSG1 is associated to the NIC of VM1 and contains the rules shown in the following table.

You collect NSG flow logs for five minutes for the following activities:
* Two RDP sessions from VM1 to VM2, each initiated from a different TCP port
* Three SSH sessions from VM2 to VM1, each initiated from a different TCP port You analyze the logs by using Traffic Analytics in Azure Network Watcher. How many aggregated flow entries will Traffic Analytics identify?

A.10
B.1
C.5
D.2