You have an Azure subscription that contains the resources shown in the following table.

You create a service endpoint policy that has the following settings:
* Associated subnets: Subnet 1
* Service: Microsoft.Storage
* Scope: Single account
* Resource: storage1
Which resources can VM1 access?

• A.storage1 and storage2 in the East US Azure region and their replicas in the paired region
• B.storage1 and storage2 in the East US Azure region only
• C.storage1 in the East US Azure region only
• D.storage1 in the East US Azure region and its replica in the paired region

Comment: *

Name: *

Email: *

Verification: *

You have the Azure load balancer shown in the Load Balancer exhibit.

LB2 has the backend pools shown in the Backend Pools exhibit.

You need to ensure that LB2 distributes traffic to all the members of VMSS1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Add a network interface to VMSS1.
• B.Configure a health probe.
• C.Add a public IP address to each member of VMSS1.
• D.Add a load balancing rule.

Comment: *

Name: *

Email: *

Verification: *

You need to restrict traffic from VMScaleSet1 to VMScaleSet2. The solution must meet the virtual networking requirements.
What is the minimum number of custom NSG rules and NSG assignments required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Box 2: One NSG
The minimum requirement is one NSG. You could attach the NSG to VMScaleSet1 and restrict outbound traffic, or you could attach the NSG to VMScaleSet2 and restrict inbound traffic. Either way you would need two custom NSG rules.
Box 1: Two custom rules
With the NSG attached to VMScaleSet2, you would need to create a custom rule blocking all traffic from VMScaleSet1. Then you would need to create another custom rule with a higher priority than the first rule that allows traffic on port 443.
The default rules in the NSG will allow all other traffic to VMScaleSet2.

Comment: *

Name: *

Email: *

Verification: *

You plan to publish a website that will use an FQDN of www.contoso.com. The website will be hosted by using the Azure App Service apps shown in the following table.

You plan to use Azure Traffic Manager to manage the routing of traffic for www.contoso.com between AS1 and AS2.
You need to ensure that Traffic Manager routes traffic for www.contoso.com.
Which DNS record should you create?

• A.two A records that map wmv.contoso.com to 131 107 100 1 and 131 107 200 1
• B.a CNAME record that maps www.contoso.com to TMprofile1.azurefd.net
• C.a CNAME record that mapswww.contoso.comtoTMprofile1.trafficmanager.net
• D.a TXT record that contains a string ofas1.contoso.com and as2.contoso.com in the details

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.
You configure the application gateway to direct traffic to the URL of the application gateway.
You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.

You need to ensure that the URL is accessible through the application gateway.
Solution: You disable the WAF rule that has a ruleld of 920300.
Does this meet the goal?

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *