Microsoft AZ-700 Exam Dumps

Correct Answer: CDE

Transition connectivity to virtual WAN hub:

Step 1. (E) Delete the existing peering connections from Spoke virtual networks to the old customer-managed hub. Access to applications in spoke virtual networks is unavailable until steps 1-3 are complete.

Step 2. (D) Connect the spoke virtual networks to the Virtual WAN hub via VNet connections.

Step 3. (C) Remove any user-defined routes (UDR) previously used within spoke virtual networks for spoke-to-spoke communications. This path is now enabled by dynamic routing available within the Virtual WAN hub.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-wan/migrate-from-hub-spoke-topology

Correct Answer:

Box 1: 2 Listeners

One listener for As1.contoso.com, and one listener for As2.contoso.com.

Note: Multiple site hosting enables you to configure more than one web application on the same port of application gateways using public-facing listeners. It allows you to configure a more efficient topology for your deployments by adding up to 100+ websites to one application gateway. Each website can be directed to its own backend pool. For example, three domains, contoso.com, fabrikam.com, and adatum.com, point to the IP address of the application gateway. You'd create three multi-site listeners and configure each listener for the respective port and protocol setting.

You can also define wildcard host names in a multi-site listener and up to 5 host names per listener.

Box 2: 2 Routing rules

Application Gateway request routing rules Rule type When you create a rule, you choose between basic and path-based.

*

Choose basic if you want to forward all requests on the associated listener (for example, blog.contoso.com/*) to a single backend pool.

*

Choose path-based if you want to route requests from specific URL paths to specific backend pools. The path pattern is applied only to the path of the URL, not to its query parameters.

Associated backend pool

Associate to the rule the backend pool that contains the backend targets that serve requests that the listener receives.

*

For a basic rule, only one backend pool is allowed. All requests on the associated listener are forwarded to that backend pool.

*

For a path-based rule, add multiple backend pools that correspond to each URL path. The requests that match the URL path that's entered are forwarded to the corresponding backend pool. Also, add a default backend pool. Requests that

don't match any URL path in the rule are forwarded to that pool.

Reference: https://learn.microsoft.com/en-us/azure/application-gateway/multiple-site-overview

Correct Answer:

Y - You need to add User Defined Route to the Firewall Appliance from the subnets (https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal)

N - The firewall is not a VPN Gateway, and we do not have any connection with On-Premises here (https://learn.microsoft.com/en-us/answers/questions/516530/how-to-set-up-a-multi-spoke-virtual-network-in-azu)

Y - Azure Firewall can filter by web categories (https://learn.microsoft.com/en-us/azure/firewall/web-categories)