HOTSPOT
-

You have an Azure subscription that contains 1,000 virtual machines.

You collect network security group (NSG) flow logs.

You need to identify all the virtual machines that have interacted with non-Azure public IP addresses during the last 30 days.

How should you complete the query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

HOTSPOT
-

You have an Azure subscription that contains the resources shown in the following table:



Each quarter, you deploy five new virtual machines to host App1.

You need to add a rule to NSG1 to ensure that the virtual machines that host App1 can connect to SQL1 and SQL2. The solution must follow the principle of least privilege and minimize administrative effort.

How should you configure the source property and the destination property for the rule? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have an Azure subscription that contains an Azure Front Door named FD1. FD1 is configured as shown in the following exhibit.



You need to enable Azure Private Link for FD1.

What should you do first?

You have an Azure subscription that contains an instance of Azure Firewall Standard named AzFW1.

You plan to enable the following:

•TLS inspection
•Threat intelligence
•A network intrusion detection and prevention system (IDPS)

What can you enable by using AzFW1?

DRAG DROP
-

You have an Azure Web Application Firewall (WAF) v2 tier named AG1 on an Azure application gateway. AG1 has a policy named Policy1.

You need to add a custom rule to Policy1. The rule must block all requests from IP addresses in a specific IP address range.

Which four PowerShell cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

Correct Answer: