You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks.
You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub.
You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution.
What should you include in the solution?
Answer : B
You plan to implement an Azure virtual network that will contain 10 virtual subnets. The subnets will use IPv6 addresses. Each subnet will host up to 200 load-balanced virtual machines.
You need to recommend which subnet mask size to use for the virtual subnets.
What should you recommend?
Answer : D
You have the Azure virtual networks shown in the following table.
You deploy Azure Firewall to Vnet3.
You need to ensure that the traffic from Subnet1-1 to Subnet2-1 passes through the firewall. What should you configure?
Answer : B
Your company has an office in New York.
The company has an Azure subscription that contains the virtual networks shown in the following table.
Name
Location
Vnet1
East LS
Vnet2
North Europe
Vnet3
West US
Vnet4
West Europe
You need to connect the virtual networks to the office by using ExpressRoute. The solution must meet the following requirements:
* The connection must have up to 1 Gbps of bandwidth.
* The office must have access to all the virtual networks.
* Costs must be minimized.
How many ExpressRoute circuits should be provisioned, and which ExpressRoute 5KU should you enable?
Answer : B
You have an Azure subscription that contains the resources shown in the following table.
You need to configure FW1 to filter traffic that originates from VNet1 and targets the FQDN of SQLDB1 Which type of rule should you use?
Answer : B
SIMULATION
Task 1
You need to ensure that virtual machines on VNET1 and VNET2 are included automatically in a DNS zone named contoso.azure. The solution must ensure that the virtual machines on VNET1 and VNET2 can resolve the names of the virtual machines on either virtual network.
Answer : A
To achieve the task of ensuring that virtual machines on VNET1 and VNET2 are included automatically in a DNS zone namedcontoso.azure, and that they can resolve the names of the virtual machines on either virtual network, you can follow these steps:
Step-by-Step Solution
Step 1: Create a Private DNS Zone
Navigate to the Azure Portal.
Search for ''Private DNS zones''in the search bar and select it.
Click on ''Create''.
Enter the DNS zone nameascontoso.azure.
Select the appropriate subscriptionand resource group.
Click on ''Review + create''and then''Create''.
Step 2: Link VNET1 and VNET2 to the DNS Zone
Go to the newly created DNS zone(contoso.azure).
Select ''Virtual network links''from the left-hand menu.
Click on ''Add''.
Enter a namefor the link (e.g.,VNET1-link).
Select the subscriptionandvirtual network (VNET1).
Enable auto-registrationto ensure that VMs are automatically registered in the DNS zone.
Click on ''OK''.
Repeat the processfor VNET2.
Step 3: Configure DNS Settings for VNET1 and VNET2
Navigate to VNET1in the Azure Portal.
Select ''DNS servers''under the ''Settings'' section.
Ensure that the DNS server is set to ''Default (Azure-provided)''.
Repeat the processfor VNET2.
Step 4: Verify Name Resolution
Deploy a virtual machinein VNET1 and another in VNET2.
Connect to the virtual machinesusing Remote Desktop Protocol (RDP) or Secure Shell (SSH).
Test name resolutionby pinging the VM in VNET2 from the VM in VNET1 using its hostname (e.g.,ping <VM-name>.contoso.azure).
Explanation
Private DNS Zone: This allows you to manage and resolve domain names in a private network without exposing them to the public internet.
Virtual Network Links: Linking VNET1 and VNET2 to the DNS zone ensures that VMs in these networks can register their DNS records automatically.
Auto-registration: This feature automatically registers the DNS records of VMs in the linked virtual networks, simplifying management.
DNS Settings: Using Azure-provided DNS ensures that the VMs can resolve each other's names without additional configuration.
By following these steps, you ensure that virtual machines on VNET1 and VNET2 are included automatically in the DNS zonecontoso.azureand can resolve each other's names seamlessly.
SIMULATION
Task 6
You need to ensure that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address. The solution must minimize administrative effort when adding hosts to the subnet.
Answer : A
Here are the steps and explanations for ensuring that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address:
On theCreate a NAT gatewaypage, enter or select the following information and accept the defaults for the remaining settings:
Subscription: Select your subscription name
Resource group: Select your resource group
Name: Type a unique name for your NAT gateway
Region: Select the same region as your virtual network
SelectReview + createand then selectCreateto create your NAT gateway3.
To associate the NAT gateway with subnet3-2, you need to go to theVirtual networksservice in the Azure portal and select your virtual network.
On theVirtual networkpage, selectSubnetsunderSettings, and then select subnet3-2 from the list.
On theEdit subnetpage, underNAT gateway, select your NAT gateway from the drop-down list. Then selectSave.