Microsoft Exam AZ-700 Topic 3 Question 62 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 62
Topic #: 3

You have an Azure virtual network named Vnet1.

You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.

Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Aan allow rule that has the IP address range of Vnet1 as the source and destination of Sq1.EastUS

Ba deny rule that has a source of VirtualNetwork and a destination of Sq1

Ca deny rule that has a source of VirtualNetwork and a destination of 168.63.129.0/24

Da deny rule that has the IP address range of Vnet1 as the source and destination of Storage

Show Suggested Answer

Suggested Answer: A

Here are the steps and explanations for creating the object that will provide the IP addressing configuration of the on-premises network to the Site-to-Site VPN:

The object that you need to create is called a local network gateway. A local network gateway represents your on-premises network and VPN device in Azure. It contains the public IP address of your VPN device and the address prefixes of your on-premises network that you want to connect to the Azure virtual network1.

To create a local network gateway, you need to go to the Azure portal and selectCreate a resource. Search forlocal network gateway, selectLocal network gateway, then selectCreate2.

On theCreate local network gatewaypage, enter or select the following information and accept the defaults for the remaining settings:

Name: Type a unique name for your local network gateway.

IP address: Type the public IP address of your VPN device, which is 131.107.50.60 in this case.

Address space: Type the internal address range of your on-premises network, which is 10.10.0.0/16 in this case.

Subscription: Select your subscription name.

Resource group: Select your resource group name.

Location: Select the same region as your virtual network.

SelectReview + createand then selectCreateto create your local network gateway2.

by Melynda at Jun 24, 2024, 09:28 PM

Limited Time Offer