Microsoft

Free AZ-700 - Microsoft Certified: Azure Network Engineer Associate Practice Questions

Test your knowledge with 10 free sample practice questions for the AZ-700 - Microsoft Certified: Azure Network Engineer Associate certification. Each question includes a detailed explanation to help you learn.

10 Questions

No time limit

Free - No signup required

Disclaimer: These are original, AI-generated practice questions created by ProctorPulse for exam preparation purposes. They are not sourced from any official exam and are not affiliated with or endorsed by Microsoft. Use them as a study aid alongside official preparation materials.

Question 1: (Select all that apply) You are tasked with setting up name resolution for an Azure virtual network with multiple subnets. Each subnet requires access to a shared private DNS zone for internal domain resolution. Which steps should you include in your configuration to achieve this setup?

A. Link the virtual network to the private DNS zone and configure the DNS servers in the virtual network settings to use Azure DNS. (Correct Answer)
B. Create a custom DNS server and update the network security group to allow DNS traffic between the subnets and the DNS server.
C. Enable auto-registration of virtual machines in the private DNS zone for dynamic DNS updates. (Correct Answer)
D. Deploy an Azure Bastion host to manage DNS queries across the subnets.

Explanation: To design and implement name resolution using a private DNS zone in Azure, the virtual network should be linked to the private DNS zone, ensuring that DNS queries from the VMs can be resolved internally. Additionally, enabling auto-registration allows VMs to dynamically update the DNS records in the private DNS zone. Using Azure DNS as the DNS server in network settings ensures seamless internal name resolution without the need for custom DNS servers or Bastion hosts.

Question 2: You are tasked with setting up a public DNS zone for a new domain "example.com" in Azure. What is the first step you should take to ensure the DNS records can be managed effectively within Azure?

A. Register the domain with a domain registrar that supports Azure DNS integration.
B. Create a resource group in Azure to contain the DNS zone resources.
C. Add a custom domain to your Azure Active Directory tenant.
D. Create a public DNS zone for 'example.com' in Azure DNS. (Correct Answer)

Explanation: To manage DNS records for a domain in Azure, you need to create a DNS zone within Azure DNS. This step allows you to configure and manage the DNS records for the domain 'example.com'. Creating a resource group is a separate organizational task, and registering the domain or adding it to Azure Active Directory are not directly related to setting up a DNS zone.

Question 3: What is a suitable approach for ensuring seamless name resolution between on-premises and Azure environments in a hybrid DNS setup?

A. Use Azure DNS Private Zones and configure conditional forwarding on the on-premises DNS servers. (Correct Answer)
B. Deploy an Azure DNS resolver VM in each on-premises location to forward requests to Azure DNS.
C. Set up a VPN connection and rely solely on Azure DNS for all resolution needs.
D. Enable Azure Traffic Manager to manage DNS queries across the hybrid environment.

Explanation: To integrate on-premises DNS with Azure DNS effectively, Azure DNS Private Zones can be used in conjunction with conditional forwarding on the on-premises DNS servers. This approach allows on-premises queries to be forwarded to Azure DNS for specific domains, facilitating seamless name resolution across both environments. Deploying DNS resolvers or relying solely on Azure DNS can introduce latency or single points of failure, while Azure Traffic Manager is used for traffic distribution, not DNS resolution.

Question 4: You are tasked with creating a subnet within an Azure Virtual Network that can accommodate up to 50 hosts. What is the smallest subnet mask you can use to meet this requirement?

A. /26
B. /27 (Correct Answer)
C. /28
D. /29

Explanation: To determine the appropriate subnet mask for 50 hosts, we need to calculate the number of host addresses each subnet can provide. A /27 subnet mask allows for $2^{32-27} = 32 - 2 = 30$ usable addresses, which is insufficient. A /26 subnet allows for $2^{32-26} = 64 - 2 = 62$ usable addresses, which is sufficient for 50 hosts. Therefore, the smallest subnet mask that can accommodate 50 hosts is /26. However, since the options provided do not include /26, /27 is the correct answer given the options, allowing for 30 hosts, the closest to the requirement without exceeding it.

Question 5: (Select all that apply) When configuring private IP addressing for Azure App Service and Azure SQL Database, which steps should be taken to ensure proper network setup?

A. Assign a subnet from a virtual network to the Azure App Service.
B. Enable VNet integration for the Azure App Service to ensure it can access resources in a virtual network. (Correct Answer)
C. Assign a static IP address to the Azure SQL Database to maintain consistent connection endpoints.
D. Configure a private endpoint for the Azure SQL Database to secure traffic within the virtual network. (Correct Answer)

Explanation: To configure private IP addressing for Azure services, certain steps are necessary. Enabling VNet integration for Azure App Service allows it to access resources in a virtual network, which is crucial for private IP addressing. Configuring a private endpoint for Azure SQL Database ensures that all traffic remains within the virtual network, enhancing security. Assigning a subnet directly to Azure App Service is not applicable, and Azure SQL Database does not support static IP assignments in the way described.

Question 6: You are tasked with configuring private IP addresses for Azure virtual machines in a Virtual Network. Which method allows you to ensure that a specific virtual machine always receives the same private IP address each time it restarts?

A. Assign a static private IP address to the virtual machine from within the Azure portal. (Correct Answer)
B. Configure a dynamic private IP address and use Azure DNS to resolve the IP consistently.
C. Use Azure PowerShell to set a reserved IP address pool for the virtual machine.
D. Implement a script that assigns the IP address upon each boot using Azure Automation.

Explanation: Assigning a static private IP address within the Azure portal ensures that a virtual machine will always receive the same private IP address upon restart. This method is crucial for applications requiring consistent IP address configurations. Dynamic IP addresses may change upon VM restart, and Azure DNS or scripts cannot guarantee consistency without static assignment.

Question 7: You are tasked with reconfiguring the IP addresses of multiple Azure virtual machines in a production environment without causing significant service downtime. Which strategy should you implement to achieve this objective while maintaining service continuity?

A. Use Azure Traffic Manager to route traffic to a backup region while reconfiguring IP addresses in the primary region.
B. Utilize Azure Load Balancer to employ the floating IP feature for seamless IP transition. (Correct Answer)
C. Enable Azure Virtual Network Peering to automatically synchronize IP changes across regions.
D. Leverage Azure Site Recovery to failover to a secondary region during IP reconfiguration.

Explanation: The Azure Load Balancer's floating IP feature allows seamless transition of IP addresses by enabling a secondary IP configuration on the network interface of the virtual machines. This method minimizes downtime as the service remains available through the load balancer while IP changes are made internally.

Question 8: What considerations should you prioritize to ensure that your IP addressing plan remains flexible and scalable for future expansions in Azure?

A. Use a single large subnet for all resources to minimize complexity.
B. Implement a hierarchical IP addressing scheme to segment different resource groups. (Correct Answer)
C. Allocate IP address ranges with reserved space for future services. (Correct Answer)
D. Use public IP addresses for all internal resource communications to ensure flexibility.

Explanation: When designing an IP addressing plan for Azure, it's important to consider future expansions and scalability. Using a hierarchical IP addressing scheme (Option B) helps in organizing different resource groups and can make management easier as the network grows. Allocating IP address ranges with reserved space for future services (Option C) ensures that you have the flexibility to add new services without reconfiguring the entire network. Avoid using a single large subnet (Option A) as it can lead to inefficient IP usage and potential conflicts. Using public IP addresses for all internal communications (Option D) can expose resources to unnecessary security risks and is not a recommended practice.

Question 9: What is the first step in configuring a virtual network service endpoint for Azure Storage within a single virtual network?

A. Navigate to the Azure Storage account and enable the service endpoint feature.
B. Create a new subnet within the virtual network specifically for the service endpoint.
C. Access the virtual network in the Azure portal and select the subnet where the endpoint will be enabled. (Correct Answer)
D. Assign a public IP address to the virtual network to facilitate communication with Azure Storage.

Explanation: To configure a service endpoint for Azure Storage within a virtual network, the first step is to access the virtual network in the Azure portal and select the subnet where the service endpoint will be enabled. This involves updating the subnet configuration to allow traffic to the Azure service. Service endpoints extend your virtual network private address space to the Azure services over a direct connection.

Question 10: You are tasked with configuring network traffic policies for a company's Azure environment. The company uses several Azure services, and the security team has mandated that only specific services should be accessible over the established network. You need to implement a solution using service endpoint policies to restrict traffic effectively.

A. Configure service endpoint policies on the virtual network to allow only traffic to Azure SQL Database and Azure Storage. (Correct Answer)
B. Use Azure Firewall to block all outbound traffic except for specified Azure services.
C. Implement network security groups to restrict access to particular Azure services.
D. Apply service endpoint policies to the subnet to restrict traffic to Azure App Services only.

Explanation: Service endpoint policies allow you to specify which Azure services can be accessed over a virtual network service endpoint. By configuring service endpoint policies on the virtual network, you can restrict traffic to specific services such as Azure SQL Database and Azure Storage, as required by the scenario. Options B and C involve other security tools that are not directly related to service endpoint policies, and option D incorrectly applies service endpoint policies to Azure App Services, which is not supported.

Question 1Hard

(Select all that apply) You are tasked with setting up name resolution for an Azure virtual network with multiple subnets. Each subnet requires access to a shared private DNS zone for internal domain resolution. Which steps should you include in your configuration to achieve this setup?

(Select all that apply)

ALink the virtual network to the private DNS zone and configure the DNS servers in the virtual network settings to use Azure DNS.

BCreate a custom DNS server and update the network security group to allow DNS traffic between the subnets and the DNS server.

CEnable auto-registration of virtual machines in the private DNS zone for dynamic DNS updates.

DDeploy an Azure Bastion host to manage DNS queries across the subnets.

Question 2Easy

You are tasked with setting up a public DNS zone for a new domain "example.com" in Azure. What is the first step you should take to ensure the DNS records can be managed effectively within Azure?

ARegister the domain with a domain registrar that supports Azure DNS integration.

BCreate a resource group in Azure to contain the DNS zone resources.

CAdd a custom domain to your Azure Active Directory tenant.

DCreate a public DNS zone for 'example.com' in Azure DNS.

Question 3Medium

What is a suitable approach for ensuring seamless name resolution between on-premises and Azure environments in a hybrid DNS setup?

AUse Azure DNS Private Zones and configure conditional forwarding on the on-premises DNS servers.

BDeploy an Azure DNS resolver VM in each on-premises location to forward requests to Azure DNS.

CSet up a VPN connection and rely solely on Azure DNS for all resolution needs.

DEnable Azure Traffic Manager to manage DNS queries across the hybrid environment.

Question 4Easy

You are tasked with creating a subnet within an Azure Virtual Network that can accommodate up to 50 hosts. What is the smallest subnet mask you can use to meet this requirement?

A/26

B/27

C/28

D/29

Question 5Medium

(Select all that apply) When configuring private IP addressing for Azure App Service and Azure SQL Database, which steps should be taken to ensure proper network setup?

(Select all that apply)

AAssign a subnet from a virtual network to the Azure App Service.

BEnable VNet integration for the Azure App Service to ensure it can access resources in a virtual network.

CAssign a static IP address to the Azure SQL Database to maintain consistent connection endpoints.

DConfigure a private endpoint for the Azure SQL Database to secure traffic within the virtual network.

Question 6Medium

You are tasked with configuring private IP addresses for Azure virtual machines in a Virtual Network. Which method allows you to ensure that a specific virtual machine always receives the same private IP address each time it restarts?

AAssign a static private IP address to the virtual machine from within the Azure portal.

BConfigure a dynamic private IP address and use Azure DNS to resolve the IP consistently.

CUse Azure PowerShell to set a reserved IP address pool for the virtual machine.

DImplement a script that assigns the IP address upon each boot using Azure Automation.

Question 7Hard

You are tasked with reconfiguring the IP addresses of multiple Azure virtual machines in a production environment without causing significant service downtime. Which strategy should you implement to achieve this objective while maintaining service continuity?

AUse Azure Traffic Manager to route traffic to a backup region while reconfiguring IP addresses in the primary region.

BUtilize Azure Load Balancer to employ the floating IP feature for seamless IP transition.

CEnable Azure Virtual Network Peering to automatically synchronize IP changes across regions.

DLeverage Azure Site Recovery to failover to a secondary region during IP reconfiguration.

Question 8Medium

What considerations should you prioritize to ensure that your IP addressing plan remains flexible and scalable for future expansions in Azure?

(Select all that apply)

AUse a single large subnet for all resources to minimize complexity.

BImplement a hierarchical IP addressing scheme to segment different resource groups.

CAllocate IP address ranges with reserved space for future services.

DUse public IP addresses for all internal resource communications to ensure flexibility.

Question 9Easy

What is the first step in configuring a virtual network service endpoint for Azure Storage within a single virtual network?

ANavigate to the Azure Storage account and enable the service endpoint feature.

BCreate a new subnet within the virtual network specifically for the service endpoint.

CAccess the virtual network in the Azure portal and select the subnet where the endpoint will be enabled.

DAssign a public IP address to the virtual network to facilitate communication with Azure Storage.

Question 10Medium

You are tasked with configuring network traffic policies for a company's Azure environment. The company uses several Azure services, and the security team has mandated that only specific services should be accessible over the established network. You need to implement a solution using service endpoint policies to restrict traffic effectively.

AConfigure service endpoint policies on the virtual network to allow only traffic to Azure SQL Database and Azure Storage.

BUse Azure Firewall to block all outbound traffic except for specified Azure services.

CImplement network security groups to restrict access to particular Azure services.

DApply service endpoint policies to the subnet to restrict traffic to Azure App Services only.

Ready for More?

These 10 questions are just a preview. Create a free account to practice up to 3 topics with 50 questions per day — or upgrade to Pro for unlimited access.

Ready to Pass the AZ-700 - Microsoft Certified: Azure Network Engineer Associate?

Join thousands of professionals preparing for their AZ-700 - Microsoft Certified: Azure Network Engineer Associate certification with ProctorPulse. AI-generated questions, detailed explanations, and progress tracking.