Question 36
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains the following subnets.
* AzureFirewallSubnet
* GatewaySubnet
* Subnet 1
* Subnet2
* Subnet3
Subnet2 has a delegation to the Microsoft.Web/serverfarms service. The subscription contains the resources shown in the following table.
You need to implement an Azure application gateway named AG1 that will be integrated with an Azure Web Application Firewall (WAF). AG1 will be used to publish VMSS1.
To which subnet should you connect AG1?
Question 37
You have an Azure subscription that contains the resources shown in the following table.
You discover that users connect directly to App1.
You need to meet The following requirements:
* Administrators must only access App1 by using a private endpoint.
* All user connections to App1 must be routed through FD1.
* The downtime of connections to App1 must be minimized.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Question 38
You have the resources shown in the following table.
From the Microsoft Entra admin center, you register the Azure VPN application as an enterprise application.
You need to enable Microsoft Entra authentication for the P2S VPN connections. The solution must meet the following requirements;
* Ensure that only the members of Group1 can establish VPN connections to VPNGW1.
* Ensure that only the members of Group2 can establish VPN connections to VPNGW2.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Question 39
Note: This QUESTION 1is part of a series of questions that present the same scenario.
Each QUESTION 1in the series contains a unique solution that might meet the stated goals. Some QUESTION 1sets might have more than one correct solution, while others might not have a correct solution.
After you answer a QUESTION 1in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit.
Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2.
You need to ensure that Client1 can communicate with Vnet2.
Solution: You resize the gateway of Vnet1 to a larger SKU.
Does this meet the goal?
Question 40
You create NSG10 and NSG11 to meet the network security requirements.
For each of the following statements, select Yes it the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
