You have an Azure Virtual Desktop deployment that has 500 session hosts. All outbound traffic to the internet uses a NAT gateway. During peak business hours. some users report that they cannot access internet resources. In Azure Monitor, you discover many failed SNAT connections. You need to increase the available SNAT connections. What should you […]

You have an Azure application gateway named AppGW1 that balances requests to a web app named App1. You need to modify the server variables in the response header of App1. What should you configure on AppGW1? A. HTTP settings B. rewrites C. rules D. listeners Reference: https://docs.microsoft.com/en-us/azure/application-gateway/rewrite-http-headers-url

You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption. You configure the listener for HTTPS by uploading an enterprise-signed certificate. You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do? A. Increase the Unhealthy threshold setting in the […]

You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com. You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA). What should you include in the solution? A. an enterprise […]

You have an Azure application gateway named AGW1 that has a routing rule named Rule1. Rule 1 directs traffic for http://www.contoso.com to a backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1. You deploy another virtual machine scale set named VMSS2. You need to configure AGW1 to direct all traffic […]

You have an Azure subscription that contains the public IP addresses shown in the following table. You plan to deploy a NAT gateway named NAT1. Which public IP addresses can be used as the public IP address for NAT1? A. IP3 only B. IP5 only C. IP2 and IP4 only D. IP1, IP3 and IP5 […]

You plan to deploy Azure virtual network. You need to design the subnets. Which three types of resources require a dedicated subnet? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Azure Bastion B. Azure Active Directory Domain Services C. Azure Private Link D. Azure Application Gateway v2 […]

You fail to establish a Site-to-Site VPN connection between your company’s main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review? A. IKEDiagnosticLog B. RouteDiagnosticLog C. GatewayDiagnosticLog D. TunnelDiagnosticLog Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure. Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point. A. a virtual network gateway B. Azure Application Gateway C. Azure Firewall D. a […]

You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication? A. an Azure key vault B. a RADIUS server C. a certification authority D. Azure Active Directory (Azure AD) Application Proxy Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about