Microsoft Exam AZ-700 Topic 4 Question 77 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 77
Topic #: 4

You have an Azure subscription that contains a virtual machine named VM1 and a network security group (NSG) named NSG1. NSG1 has the default rules configured VM1 runs Windows Server and contains a single NIC named NIC1 NIC! is associated with NSG1.

You need to prevent access to the Azure Instance Metadata Service (IMDS) REST API on VM1 The solution must minimize administrative effort.

What should you add to NSG1?

Aan outbound rule that blocks traffic to an IP address

Ban outbound rule that blocks traffic to a service tag

Can inbound and outbound rule that blocks traffic to an application security group.

Dan inbound rule that blocks traffic to an IP address

Show Suggested Answer

Suggested Answer: A

Here are the steps and explanations for ensuring that requests for wwwjelecloud.com from any of your Azure virtual networks resolve to frontdoor1.azurefd.net:

To use a custom domain with your Azure Front Door, you need to create a CNAME record with your domain provider that points to the Front Door default frontend host.A CNAME record is a type of DNS record that maps a source domain name to a destination domain name1.

To create a CNAME record, you need to sign in to your domain registrar's website and go to the page for managing DNS settings1.

Create a CNAME record with the following information1:

Source domain name: wwwjelecloud.com

Destination domain name: frontdoor1.azurefd.net

Save your changes and wait for the DNS propagation to take effect1.

To verify the custom domain, you need to go to the Azure portal and select your Front Door profile.Then select Domains under Settings and select Add2.

On the Add a domain page, select Non-Azure validated domain as the Domain type and enter wwwjelecloud.com as the Domain name.Then select Add2.

On the Domains page, select wwwjelecloud.com and select Verify.This will check if the CNAME record is correctly configured2.

Once the domain is verified, you can associate it with your Front Door endpoint. On the Domains page, select wwwjelecloud.com and select Associate endpoint.Then select your Front Door endpoint from the drop-down list and select Associate2.

by Jodi at Dec 06, 2024, 04:20 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashon

1 months ago

Forget all this networking stuff, I'm just going to use the IMDS API to order some tacos. What could go wrong?

upvoted 0 times

...

Margret

1 months ago

Ha! I bet the exam writers are trying to trip us up with these options. Let's see, B seems like the winner to me.

upvoted 0 times

Isaiah

6 days ago

User4: Let's go with B then. It seems like the most logical choice.

upvoted 0 times

...

Alonso

8 days ago

User3: I'm not so sure, but I'll go with B too.

upvoted 0 times

...

Jeanice

21 days ago

User2: Yeah, I agree. B sounds like the right choice.

upvoted 0 times

...

Chandra

22 days ago

User1: I think B is the best option.

upvoted 0 times

...

Corrina

1 months ago

This is a tricky one. I was considering C, but I'm not sure if adding both inbound and outbound rules is really necessary to achieve the desired outcome.

upvoted 0 times

Carlene

24 days ago

User1: I think D is the correct option. Just block traffic to the IP address.

upvoted 0 times

...

Eden

2 months ago

I'm not sure about this one. Wouldn't an inbound rule that blocks traffic to an IP address (D) be a more targeted solution?

upvoted 0 times

Lonny

18 days ago

User1: Maybe we should consider both options and see which one works best for our scenario.

upvoted 0 times

...

Rebeca

1 months ago

User2: I disagree, I believe an inbound rule that blocks traffic to an IP address (D) would be more effective.

upvoted 0 times

...

Shalon

1 months ago

User1: I think an outbound rule that blocks traffic to an IP address (A) would be the best option.

upvoted 0 times

...

Felicitas

2 months ago

Hmm, I think B is the correct answer. Blocking traffic to the IMDS service tag seems like the most straightforward way to prevent access to the IMDS REST API.

upvoted 0 times