Question 1

You have an Azure subscription that contains the public IP addresses shown in the following table.

You plan to deploy a NAT gateway named NAT1. Which public IP addresses can be used as the public IP address for NAT1?

Options :

A : IP3 and IP5 only

B : IP5 only

C : IP1, IP3, and IP5 only

D : IP3 only

E : IP2 and IP4 only

Answer: D

Question 2

You have an Azure subscription that contains a virtual machine named VM1 and a network security group (NSG) named NSG1. NSG1 has the default rules configured VM1 runs Windows Server and contains a single NIC named NIC1 NIC! is associated with NSG1. You need to prevent access to the Azure Instance Metadata Service (IMDS) REST API on VM1 The solution must minimize administrative effort. What should you add to NSG1?

Options :

A : an outbound rule that blocks traffic to an IP address

B : an outbound rule that blocks traffic to a service tag

C : an inbound and outbound rule that blocks traffic to an application security group.

D : an inbound rule that blocks traffic to an IP address

Answer: B

Question 3

You have an Azure subscription that contains the resources shown in the following table.

You need to configure a solution to meet the following requirements; • App1 must be assigned a private endpoint • Access to App1 from the internet must be routed via FD1. What should you configure on FD1?

Options :

A : a rule that has the route configuration override action

B : a route that redirects traffic

C : an origin that enables the Azure Private Link service

D : a security policy that redirects traffic

Answer: C

Question 4

You have the Azure load balancer shown in the Load Balancer exhibit.

LB2 has the backend pools shown in the Backend Pools exhibit.

You need to ensure that LB2 distributes traffic to all the members of VMSS1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options :

A :

Add a network interface to VMSS1.

B : Configure a health probe.

C : Add a public IP address to each member of VMSS1.

D : Add a load balancing rule.

Answer: B,D

Question 5

You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1 You need to deploy Azure Firewall to RG1. The solution must minimize administrative effort What should you do first?

Options :

A : Create a secured virtual hub named AzureFirewallHub.

B : Create a new resource group named AzureFirewallResourceGroup.

C : Create a new virtual network named AzureFirewallNetwork.

D : On VNet1, create a virtual subnet named AzureFirewallSubnet.

Answer: D