The company only has Azure resources in the East US region.

You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize Costs.

Which type of ExpressRoute circuits should you create?

您的公司在华盛顿特区有一个本地数据中心。美国东部的蔚蓝地区在华盛顿特区有一个凝视的位置。该公司只在美国东部地区拥有Azure资源。您需要实现表达式路由来支持高达1 Gbps。您必须只使用表达式路由无限的数据计划。该解决方案必须将成本降到最低。你应该创建哪种类型的表达式路线电路？

Users will authenticate by an on-premises Active Directory domain.

Which additional service should you deploy to support the VPN authentication?

您正在计划使用OpenVPN的Azure点对点（P2S）VPN。

用户将通过本地Active Directory域进行身份验证。

您应该部署哪些附加服务来支持VPN身份验证？

Which two Azure resources should you confi gure? Each correct answer presents a part of the solution. (Choose two.)

NOTE: Each correct selection is worth one point.

You need to troubleshoot what prevents you from establishing the IPsec tunnel.

Which diagnostic log should you review?

您无法在公司的主要办公室和Azure虚拟网络之间建立站点到站点VPN连接。

您需要排除阻止您建立IPsec隧道的原因。

您应该查看哪个诊断日志？

You are planning a Site-to-Site VPN connection between the datacenter and the virtual network.

Which two resources should you include in your plan? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

您有一个Azure虚拟网络和一个本地数据中心。

您正在计划数据中心和虚拟网络之间的站点到站点VPN连接。

你的计划应该包括哪两种资源？每个正确的答案都是解决方案的一部分。

注意：每个正确的选择值一分。

The departments at the company use the Azure subscriptions as shown in the following table.

（含图）

All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region.

You plan to connect all the subscriptions to the on-premises network by using ExpressRoute.

What is the minimum number of ExpressRoute circuits required?

您的公司有一个内部部署网络和三个名为Subscription1、Subscription2和Subscription3的Azure订阅。

该公司的部门使用Azure订阅，如下表所示。

订阅中的所有资源都位于美国西部Azure区域或美国西部2 Azure区域。

您计划使用ExpressRoute将所有订阅连接到本地网络。

所需ExpressRoute电路的最小数量是多少？

The offi ce in Amsterdam uses resources in the North Europe Azure region. The offi ce in New York uses resources in the East US Azure region.

You need to implement ExpressRoute circuits to connect each offi ce to the nearest Azure region. Once the ExpressRoute circuits are connected,

The on-premises computers in the Amsterdam offi ce must be able to connect to the on-premises servers in the New York offi ce by using the ExpressRoute circuits.

Which ExpressRoute option should you use?

贵公司在纽约和阿姆斯特丹设有办事处。该公司已订阅Azure。两个办公室都通过使用站点到站点VPN连接连接到Azure。

阿姆斯特丹的办公室使用北欧Azure地区的资源。纽约的办公室使用美国东部Azure地区的资源。

您需要实现ExpressRoute电路，以便将每个办公室连接到最近的Azure区域。一旦ExpressRoute电路被连接，

阿姆斯特丹办事处的本地计算机必须能够通过使用ExpressRoute电路。您应该使用哪个ExpressRoute选项？

What should you confi gure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您需要连接本地网络和Azure环境。解决方案必须使用ExpressRoute，并支持在ExpressRoute出现故障时故障转移到站点到站点VPN连接。

你应该确认什么？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

Hot Area:（含图）

You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections

Must be authenticated by Azure Active Directory (Azure AD).

What should you confi gure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您有一个Azure订阅，该订阅包含一个虚拟网络和一个虚拟网关中。

您需要确保管理员可以使用点对点（P2S）VPN连接来访问虚拟网络中的资源。连接

必须由Azure Active Directory（Azure AD）进行身份验证。

你应该确认什么？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

Hot Area:

（含图）

You have the hybrid network shown in the Network Diagram exhibit

（含图）

You have a peering connection between Vnet1 and Vnet2 as shown in the Peering-Vnet1-Vnet2 exhibit.

（含图）

You have a peering connection between Vnet1 and Vnet3 as shown in the Peering-Vnet1-Vnet3 exhibit.

（含图）

（含图）

（含图）

You have virtual network peering between Vnet1 and Vnet2. You have virtual network peering between Vnet4 and Vnet5. The virtual network

Peering is confi gured as shown in the following table

（含图）

（含图）

您已经在展览中展示了Azure环境。

您在Vnet1和Vnet2之间有虚拟网络对等。您在Vnet4和Vnet5之间有虚拟网络对等。虚拟网络

对等配置如下表所示

You have on-premises datacenters in New York and Seattle.

You have an Azure subscription that contains the ExpressRoute circuits shown in the following table.

（含图）

You need to ensure that all the data sent between the datacenters is routed via the ExpressRoute circuits. The solution must minimize costs.

How should you confi gure the network? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您在纽约和西雅图都有本地数据中心。

您的Azure订阅包含下表中显示的ExpressRoute电路。

您需要确保在数据中心之间发送的所有数据都通过ExpressRoute电路进行路由。解决方案必须将成本降至最低。

您应该如何配置网络？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

（含图）

In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.

You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit

（含图）

You need to ensure that the on-premises network can connect to the route-based GW1.

What should you do before you create the connection?

您有一个名为Vnet1的Azure虚拟网络和一个本地网络。本地网络具有基于策略的VPN设备。

在Vnet1中，您部署了一个名为GW1的虚拟网络网关，该网关使用VpnGw1的SKU，并且是基于路由的。

您有GW1的站点到站点VPN连接，如下表所示

您需要确保本地网络可以连接到基于路由的GW1。

在创建连接之前应该做什么？

You have an Azure subscription that contains a virtual network and a virtual network gateway.

You need to create a Site-to-Site VPN connection that has a custom cryptographic policy.

How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point

您的本地网络包含一个VPN设备。

您有一个包含虚拟网络和虚拟网络网关的Azure订阅。

您需要创建一个具有自定义加密策略的站点到站点VPN连接。

您应该如何完成PowerShell脚本？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分

（含图）

You need to ensure that all traffi c from the virtual network to the internet is routed through the datacenter.

How should you complete the PowerShell script to confi gure forced tunneling? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您有一个Azure虚拟网络和一个本地数据中心，它们通过使用站点到站点VPN隧道进行连接。

您需要确保从虚拟网络到互联网的所有传输都是通过数据中心路由的。

您应该如何完成PowerShell脚本以配置强制隧道？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

（含图）

（含图）

A Site-to-Site VPN will connect Vnet1 to your company’s on-premises network.

You need to recommend a solution that ensures that the virtual machines on all the virtual networks can communicate with the on-premises

Network. The solution must minimize costs.

What should you recommend for Vnet2 and Vnet3?

您正在计划一个Azure部署，该部署将包含美国东部Azure地区的三个虚拟网络，如下表所示。

站点到站点VPN将Vnet1连接到您公司的内部部署网络。

您需要推荐一种解决方案，确保所有虚拟网络上的虚拟机都可以与本地通信

网络解决方案必须将成本降至最低。

您应该为Vnet2和Vnet3推荐什么？

The company has an Azure subscription that contains the virtual networks shown in the following table.

（含图）

You need to connect the virtual networks to the offi ce by using ExpressRoute. The solution must meet the following requirements:

• The connection must have up to 1 Gbps of bandwidth.

• The offi ce must have access to all the virtual networks.

• Costs must be minimized.

How many ExpressRoute circuits should be provisioned, and which ExpressRoute SKU should you enable?

贵公司在纽约设有办事处。

该公司有一个Azure订阅，其中包含下表中显示的虚拟网络。

您需要使用ExpressRoute将虚拟网络连接到办公室。解决方案必须满足以下要求：

•连接必须具有高达1 Gbps的带宽。

•办公室必须能够访问所有虚拟网络。

•必须将成本降至最低。

应该提供多少个ExpressRoute电路，以及应该启用哪个ExpressRoute SKU？

You plan to deploy an Azure VPN gateway and 90 Site-to-Site VPN connections. The solution must meet the following requirements:

• Ensure that the Site-to-Site VPN connections remain available if an Azure datacenter fails.

• Minimize costs.

Which gateway SKU should you specify?

您有一个包含虚拟网络的Azure订阅。

您计划部署一个Azure VPN网关和90个站点到站点VPN连接。解决方案必须满足以下要求：

•如果Azure数据中心出现故障，请确保站点到站点VPN连接保持可用。

•将成本降至最低。

您应该指定哪个网关SKU？

（含图）

You create a virtual network named Vnet2 in the West US region.

You plan to enable peering between Vnet1 and Vnet2.

You need to ensure that the virtual machines connected to Vnet2 can connect to VM1 and VM2 via LB1.

What should you do?

您的Azure订阅包含下表中显示的资源。

您在美国西部地区创建了一个名为Vnet2的虚拟网络。

您计划启用Vnet1和Vnet2之间的对等连接。

您需要确保连接到Vnet2的虚拟机可以通过LB1连接到VM1和VM2。

你应该怎么做？

Authority (CA).

You have an Azure subscription.

You deploy an Azure application gateway named AppGwy1 and perform the following actions:

• Confi gure an HTTP listener

• Associate a routing rule with the listener

You need to confi gure AppGwy1 to perform mutual authentication for requests from domain-joined computers to contoso.com.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and

Arrange them in the correct order

您的本地网络包含一个名为contoso.com的Active Directory域服务（AD DS）域，该域具有内部证书权威机构（CA）。

您已订阅Azure。

您部署了名为AppGwy1的Azure应用程序网关，并执行以下操作：

•配置HTTP侦听器

•将路由规则与侦听器相关联

您需要配置AppGwy1，以便对从加入域的计算机到contoso.com的请求执行相互身份验证。你应该按顺序执行哪四个动作？要回答，请将相应的操作从操作列表移动到回答区域，然后按正确顺序排列

（含图）