You have an Azure application gateway for a web app named App1. The application gateway allows end-to-end encryption. You configure the listener for HTTPS by uploading an enterprise-signed certificate. You need to ensure that the application gateway can provide end-to-end encryption for App1. What should you do? A. Increase the Unhealthy threshold setting in the […]

You have an Azure subscription that contains an Azure App Service app. The app uses a URL of https://www.contoso.com. You need to use a custom domain on Azure Front Door for www.contoso.com. The custom domain must use a certificate from an allowed certification authority (CA). What should you include in the solution? A. an enterprise […]

You have an Azure application gateway named AGW1 that has a routing rule named Rule1. Rule 1 directs traffic for http://www.contoso.com to a backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1. You deploy another virtual machine scale set named VMSS2. You need to configure AGW1 to direct all traffic […]

You have an Azure subscription that contains the public IP addresses shown in the following table. You plan to deploy a NAT gateway named NAT1. Which public IP addresses can be used as the public IP address for NAT1? A. IP3 only B. IP5 only C. IP2 and IP4 only D. IP1, IP3 and IP5 […]

You plan to deploy Azure virtual network. You need to design the subnets. Which three types of resources require a dedicated subnet? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. Azure Bastion B. Azure Active Directory Domain Services C. Azure Private Link D. Azure Application Gateway v2 […]

You fail to establish a Site-to-Site VPN connection between your company’s main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review? A. IKEDiagnosticLog B. RouteDiagnosticLog C. GatewayDiagnosticLog D. TunnelDiagnosticLog Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure. Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.) NOTE: Each correct selection is worth one point. A. a virtual network gateway B. Azure Application Gateway C. Azure Firewall D. a […]

You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication? A. an Azure key vault B. a RADIUS server C. a certification authority D. Azure Active Directory (Azure AD) Application Proxy Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about

Your company has a single on-premises datacenter in New York. The East US Azure region has a peering location in New York. The company only has Azure resources in the East US region. You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must […]

You are planning an Azure IoT Hub solution that will include 50,000 IoT devices. Each device will stream data, including temperature, device ID, and time data. Approximately 50,000 records will be written every second. The data will be visualized in near real time. You need to recommend a service to store and query the data. […]