Username and password

-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: User-12345678@cloudslice.onmicrosoft.com

Azure Password: xxxxxxxxxx

-

If the Azure portal does not load successfully in the browser, press CTRL-K to reload the

Portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678

-

You are preparing to connect your on-premises network to VNET4 by using a Site-to-Site VPN. The on-premises endpoint of the VPN will be

Created on a firewall named Firewall1.

The on-premises network has the following confi guration:

• internal address range: 10.10.0.0/16

• Firewall1 internal IP address: 10.10.1.1

• Firewall public IP address: 131.107.50.60

BGP is NOT used.

You need to create the object that will provide the IP addressing confi guration of the on-premises network to the Site-to-Site VPN. You do NOT

Need to create a virtual network gateway to complete this task.

To complete this task, sign in to the Azure portal.

用户名和密码

-

根据需要使用以下登录凭据：

要输入您的用户名，请将光标放在“登录”框中，然后单击下面的用户名。

要输入密码，请将光标放在“输入密码”框中，然后单击下面的密码。

Azure用户名：User-12345678@cloudslice.onmicrosoft.com

Azure密码：xxxxxxxxxx

-

如果Azure门户未在浏览器中成功加载，请按CTRL-K重新加载

新浏览器选项卡中的门户。

以下信息仅用于技术支持目的：

实验室实例：12345678

-

您正准备使用站点对站点VPN将本地网络连接到VNET4。VPN的本地端点将是

在名为Firewall1的防火墙上创建。

内部部署网络具有以下配置：

•内部地址范围：10.10.0.0/16

•Firewall1内部IP地址：10.10.1.1

•防火墙公共IP地址：131.107.50.60

未使用BGP。

您需要创建一个对象，该对象将为站点到站点VPN提供本地网络的IP地址配置。你没有

需要创建一个虚拟网络网关才能完成此任务。

若要完成此任务，请登录Azure门户。

Username and password

-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: User-12345678@cloudslice.onmicrosoft.com

Azure Password: xxxxxxxxxx

-

If the Azure portal does not load successfully in the browser, press CTRL-K to reload the

Portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678

-

You need to ensure that hosts on VNET2 can access hosts on both VNET1 and VNET3. The solution must prevent hosts on VNET1 and VNET3

From communicating through VNET2.

To complete this task, sign in to the Azure portal.

用户名和密码

-

根据需要使用以下登录凭据：

要输入您的用户名，请将光标放在“登录”框中，然后单击下面的用户名。

要输入密码，请将光标放在“输入密码”框中，然后单击下面的密码。

Azure用户名：User-12345678@cloudslice.onmicrosoft.com

Azure密码：xxxxxxxxxx

-

如果Azure门户未在浏览器中成功加载，请按CTRL-K重新加载

新浏览器选项卡中的门户。

以下信息仅用于技术支持目的：

实验室实例：12345678

-

您需要确保VNET2上的主机可以访问VNET1和VNET3上的主机。该解决方案必须阻止VNET1和VNET3上的主机

通过VNET2进行通信。

若要完成此任务，请登录Azure门户。

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You reset the gateway of Vnet1.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有两个名为Vnet1和Vnet2的Azure虚拟网络。

您有一个名为Client1的Windows 10设备，该设备通过使用点对点（P2S）IKEv2 VPN连接到Vnet1。

您可以在Vnet1和Vnet2之间实现虚拟网络对等。Vnet1允许网关传输。Vnet2可以使用远程网关。

您发现Client1无法与Vnet2通信。

您需要确保Client1可以与Vnet2进行通信。

解决方案：重置Vnet1的网关。

这符合目标吗？

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You enable BGP on the gateway of Vnet1.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有两个名为Vnet1和Vnet2的Azure虚拟网络。

您有一个名为Client1的Windows 10设备，该设备通过使用点对点（P2S）IKEv2 VPN连接到Vnet1。

您可以在Vnet1和Vnet2之间实现虚拟网络对等。Vnet1允许网关传输。Vnet2可以使用远程网关。

您发现Client1无法与Vnet2通信。

您需要确保Client1可以与Vnet2进行通信。

解决方案：您可以在Vnet1的网关上启用BGP。

这符合目标吗？

You need to design the subnets.

Which three types of resources require a dedicated subnet? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

您计划部署Azure虚拟网络。

您需要设计子网。

哪三种类型的资源需要专用子网？每个正确的答案都提供了一个完整的解决方案。

注意：每个正确的选择值一分。

（含图）

The links have auto registration enabled.

You create the virtual machines shown in the following table.

（含图）

You manually add the following entry to the contoso.com zone:

✑ Name: VM1

IP address: 10.1.10.9 -

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

您有一个名为contoso.com的Azure专用DNS区域，该区域链接到下表中显示的虚拟网络。

链接已启用自动注册。

您将创建下表中所示的虚拟机。

您手动将以下条目添加到contoso.com区域：

✑ 名称：VM1

IP地址：10.1.10.9-

对于以下每个语句，如果该语句为true，请选择“是”。否则，请选择“否”。

注意：每个正确的选择值一分。

Hot Area:（含图）

Subnet1 that uses an

IP address space of 192.168.0.0/24.

You create an IPv6 address range to Vnet1 by using a CIDR suffi x of /48.

You need to enable the virtual machines on Subnet1 to communicate with each other by using IPv6 addresses assigned by the company. The

Solution must minimize the number of additional IPv4 addresses.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您的公司有一个名为Vnet1的Azure虚拟网络，该网络使用192.168.0.0/20的IP地址空间。Vnet1包含名为的子网

使用192.168.0.0/24的IP地址空间。您可以使用CIDR后缀x/48创建一个到Vnet1的IPv6地址范围。

您需要使子网1上的虚拟机能够使用公司分配的IPv6地址进行通信。这个解决方案必须最大限度地减少额外IPv4地址的数量。

你应该怎么做？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

Hot Area:（含图）

You need to deploy a virtual WAN hub that meets the following requirements:

✑ Supports 10 sites that will connect to the virtual WAN hub by using a Site-to-Site VPN connection

✑ Supports 8 Gbps of ExpressRoute traffi c

✑ Minimizes costs

What should you confi gure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您计划部署Azure虚拟广域网。

您需要部署一个满足以下要求的虚拟广域网集线器：

✑ 支持使用站点到站点VPN连接连接到虚拟广域网集线器的10个站点

✑ 支持8 Gbps的ExpressRoute传输

✑ 将成本降至最低

你应该确认什么？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

Hot Area:

（含图）

You need to ensure that a virtual machine connected to Spoke1 can connect to the on-premises network through Hub1.

How should you complete the PowerShell script? To answer, drag the appropriate values to the correct targets. Each value may be used once,more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

您拥有名为Hub1和Spoke1的Azure虚拟网络。Hub1通过使用站点到站点VPN连接连接到本地网络。您正在Hub1和Spoke1之间实现对等。

您需要确保连接到Spoke1的虚拟机可以通过Hub1连接到本地网络。

您应该如何完成PowerShell脚本？若要回答，请将相应的值拖动到正确的目标。每个值可以使用一次、多次或根本不使用。您可能需要在窗格之间拖动拆分条或滚动以查看内容。

Select and Place:

（含图）

You have an Azure virtual WAN named VWAN1 that has a hub named Hub1. Hub1 connects two of the three on-premises sites by using a Site-toSite VPN connection.

You need to connect the third site to the other two sites by using Hub1.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and

Arrange them in the correct order.

你有三个内部网站。每个站点都有一个第三方VPN设备。

你有一个名为VWAN1的Azure虚拟广域网，它有一个名称为Hub1的集线器。Hub1通过使用站点到站点VPN连接来连接三个本地站点中的两个。

您需要使用Hub1将第三个站点连接到其他两个站点。

你应该按顺序执行哪四个动作？要回答，请将相应的操作从操作列表移动到回答区域，然后

按照正确的顺序排列。

Select and Place:（含图）

✑ Virtual machine

✑ Azure App Service

✑ Virtual Network gateway

✑ Azure SQL Managed Instance

App Service and SQL Managed Instance will be delegated to create resources in virtual networks.

You need to identify how many virtual networks and subnets are required for the solution. The solution must minimize costs to transfer data

Between virtual networks.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您正在计划一个Azure解决方案，该解决方案将在单个Azure区域中包含以下类型的资源：

✑ 虚拟机

✑ Azure应用程序服务

✑ 虚拟网络网关

✑ Azure SQL托管实例

应用程序服务和SQL托管实例将被委派在虚拟网络中创建资源。

您需要确定解决方案需要多少虚拟网络和子网。该解决方案必须将传输数据的成本降至最低

在虚拟网络之间。

你应该确定什么？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分。

Hot Area:

（含图）

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You download and reinstall the VPN client confi guration.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有两个名为Vnet1和Vnet2的Azure虚拟网络。

您有一个名为Client1的Windows 10设备，该设备通过使用点对点（P2S）IKEv2 VPN连接到Vnet1。

您可以在Vnet1和Vnet2之间实现虚拟网络对等。Vnet1允许网关传输。Vnet2可以使用远程网关。

您发现Client1无法与Vnet2通信。

您需要确保Client1可以与Vnet2进行通信。

解决方案：您可以下载并重新安装VPN客户端配置。

这符合目标吗？

DNS zone named contoso.com. All the virtual machines have their name registered in the contoso.com zone.

Vnet1 connects to an on-premises datacenter by using ExpressRoute.

You need to ensure that on-premises DNS servers can resolve the names in the contoso.com zone.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

您有一个名为Vnet1的Azure虚拟网络，该网络承载名为FW1的Azure防火墙和150个虚拟机。Vnet1链接到一个私有

名为contoso.com的DNS区域。所有虚拟机的名称都已在contoso.com区域中注册。

Vnet1通过使用ExpressRoute连接到本地数据中心。

您需要确保本地DNS服务器可以解析contoso.com区域中的名称。

你应该执行哪两个动作？每个正确的答案都是解决方案的一部分。

注意：每个正确的选择值一分。

Which type of resource requires IP addresses in the subnets?

您正在为Azure虚拟网络中的子网计划IP寻址。

哪种类型的资源需要子网中的IP地址？

You have the on-premises sites shown the following table.（含图）

You plan to deploy Azure Virtual WAN.

You are evaluating Virtual WAN Basic and Virtual WAN Standard.

Which type of Virtual WAN can you use for each site? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

您已订阅Azure。

下表显示了内部部署站点。

您计划部署Azure虚拟广域网。

您正在评估虚拟广域网基本版和虚拟广域网标准版。

您可以为每个站点使用哪种类型的虚拟广域网？要回答，请在回答区域中选择相应的选项。

Hot Area:

（含图）

You deploy 12 virtual machines to each virtual network, deploying four virtual machines per zone. The virtual machines in VNet1 host an app

Named App1. The virtual machines in VNet2 host an app named App2.

You plan to use Azure Virtual Network NAT to implement outbound connectivity for App1 and App2.

You need to identify the minimum number of subnets and Virtual Network NAT instances required to meet the following requirements:

✑ A failure of two zones must NOT affect the availability of either App1 or App2.

✑ A failure of two zones must NOT affect the outbound connectivity of either App1 or App2.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

在具有三个可用区域的Azure区域中，您有两个名为VNet1和VNet2的Azure虚拟网络。

您将12个虚拟机部署到每个虚拟网络，每个区域部署四个虚拟机。VNet1中的虚拟机托管一个应用程序

命名为App1。VNet2中的虚拟机托管一个名为App2的应用程序。

您计划使用Azure虚拟网络NAT为App1和App2实现出站连接。

您需要确定满足以下要求所需的子网和虚拟网络NAT实例的最小数量：

✑ 两个区域的故障不得影响App1或App2的可用性。

✑ 两个区域的故障不得影响App1或App2的出站连接。

你应该确定什么？要回答，请在回答区域中选择相应的选项

Hot Area:

（含图）

ExpressRoute circuits.

You have an Azure Application Gateway named GW1 that provides a single point of ingress from the internet.

You plan to migrate the hub-and-spoke topology to Azure Virtual WAN.

You need to identify which changes must be applied to the existing topology. The solution must ensure that you maintain a single point of ingress

From the internet.

Which three changes should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

您有一个轮辐式拓扑。该拓扑包括多个本地位置，这些位置通过连接到Azure中的集线器虚拟网络

ExpressRoute电路。

您有一个名为GW1的Azure应用程序网关，它提供了来自互联网的单一入口点。

您计划将轮辐拓扑迁移到Azure虚拟WAN。

您需要确定哪些更改必须应用于现有拓扑。该解决方案必须确保您维护单个入口点

来自互联网。

您应该在解决方案中包括哪三项更改？每个正确的答案都是解决方案的一部分。

注意：每个正确的选择值一分。