You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1.

You need to deploy Azure Firewall to RG1. The solution must minimize administrative effort.

What should you do first?

HOTSPOT
-

You have an Azure subscription that contains two virtual machines.

You monitor traffic between the virtual machines by using NSG flow logs.

You have a network security group (NSG) flow log that has the following entries.

1493763938,185.170.185.105,10.2.0.4,35370,23,T,I,A,B,,,,
1493695838,185.170.185.105,10.2.0.4,35370,23,T,I,A,C,200,500,100,300
1493696138,185.170.185.105,10.2.0.4,35370,23,T,I,A,E,1000,6000,500,1200

You need to identify the following metrics from the log entries:

•The total number of packets transferred between the virtual machines
•The total amount of bytes transferred between the virtual machines

What should you identity? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

HOTSPOT
-

You have an Azure subscription.

You plan to implement an Azure application gateway named AGW1.

You need to implement an external TLS certificate store for AGW1. The solution must meet the following requirements:

•Keys must be stored by using the highest possible security.
•Administrative effort must be minimized.

Which type of certificate store should you use, and which type of identity should you use to access the store? To answer, select the appropriate options in the answer area

NOTE: Each correct answer is worth one point.

Correct Answer:

HOTSPOT
-

You have an on-premises VPN appliance named GW1.

You have an Azure subscription that contains an Azure VPN gateway named VPNGW1. VPNGW1 connects to GW1.

You need to modify the IKEv2 encryption algorithm used by VPNGW1 and GW1.

Which PowerShell cmdlet should you run? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Correct Answer:

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an Azure Virtual Desktop host pool named Pool1.

You need to implement Azure Firewall and TLS inspection for all the outbound traffic from Pool1.

Which two resources should you configure? Each correct answer present part of the solution.

NOTE: Each correct answer is worth one point.