You install App1 on 10 Azure virtual machines.

You need to implement load balancing for App1 across all the virtual machines. The solution must minimize the number of load balancing rules.

What should you include in the solution?

您有一个名为App1的应用程序，它在一个由50个TCP端口和UDP端口组成的预配置组上侦听传入请求。

您在10台Azure虚拟机上安装了App1。

您需要在所有虚拟机上实现App1的负载平衡。该解决方案必须最大限度地减少负载平衡规则的数量。

您应该在解决方案中包括什么？

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have two Azure virtual networks named Vnet1 and Vnet2.

You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.

You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway.

You discover that Client1 cannot communicate with Vnet2.

You need to ensure that Client1 can communicate with Vnet2.

Solution: You resize the gateway of Vnet1 to a larger SKU.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有两个名为Vnet1和Vnet2的Azure虚拟网络。

您有一个名为Client1的Windows 10设备，该设备通过使用点对点（P2S）IKEv2 VPN连接到Vnet1。

您可以在Vnet1和Vnet2之间实现虚拟网络对等。Vnet1允许网关传输。Vnet2可以使用远程网关。

您发现Client1无法与Vnet2通信。

您需要确保Client1可以与Vnet2进行通信。

解决方案：您可以将Vnet1的网关调整为更大的SKU。

这符合目标吗？

You plan to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.

To which virtual networks can you deploy AF1?

The branch offi ces are confi gured as shown in the following table.（含图）

The branch offi ce routers provide internet connectivity and Site-to-Site VPN connections to GW1.

The users in Branch1 report that they can connect to internet resources, but cannot access Azure resources.

You need to ensure that the Branch1 users can connect to the Azure resources. The solution must meet the following requirements:

• Minimize downtime for all users.

• Minimize administrative effort.

What should you do first?

您的公司有四个分支机构和一个Azure订阅。订阅包含一个名为GW1的Azure VPN网关。

分支机构的配置如下表所示。

分支机构的路由器提供互联网连接和与GW1的站点到站点VPN连接。

Branch1中的用户报告他们可以连接到internet资源，但无法访问Azure资源。

您需要确保Branch1用户可以连接到Azure资源。解决方案必须满足以下要求：

•最大限度地减少所有用户的停机时间。

•尽可能减少管理工作量。

你应该先做什么？

Endpoint on Vnet1.

You have a partner company named Fabrikam, Inc. Fabrikam has an Azure subscription that contains a virtual network named Vnet2 and a virtual

Machine named VM1. VM1 is connected to Vnet2.

You need to provide VM1 with access to SQL1 by using an Azure Private Link service.

What should you implement on each virtual network? To answer, drag the appropriate resources to the correct virtual networks. Each resource may

Be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

您的Azure订阅包含名为Vnet1的虚拟网络和名为SQL1的Azure SQL数据库。SQL1有一个私有

Vnet1上的终结点。

您有一家名为Fabrikam，Inc.的合作伙伴公司。Fabrikan有一个Azure订阅，其中包含一个名为Vnet2的虚拟网络和一个虚拟

名为VM1的计算机。VM1连接到Vnet2。

您需要使用Azure私有链接服务为VM1提供对SQL1的访问权限。

您应该在每个虚拟网络上实现什么？若要回答，请将相应的资源拖动到正确的虚拟网络。每个资源可以

使用一次、多次或根本不用。您可能需要在窗格之间拖动拆分条或滚动以查看内容。

注意：每个正确的选择值一分

NOTE: Each correct selection is worth one point

（含图）

You plan to deploy an Azure Virtual Network NAT gateway named Gateway1. The solution must meet the following requirements:

• VM1 will access the internet by using its public IP address.

• VM2 will access the internet by using its public IP address.

• Administrative effort must be minimized.

You need to ensure that you can deploy Gateway1 to Vnet1.

What is the minimum number of subnets required on Vnet1?

您的Azure订阅包含下表中显示的资源。

您计划部署一个名为Gateway1的Azure虚拟网络NAT网关。解决方案必须满足以下要求：

•VM1将使用其公共IP地址访问互联网。

•VM2将使用其公共IP地址访问互联网。

•必须尽量减少行政工作。

您需要确保能够将Gateway1部署到Vnet1。

Vnet1上需要的最小子网数量是多少？

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual network gateway named Gateway1. Each

Offi ce connects to Gateway1 by using a Site-to-Site VPN connection.

You need to replace the third-party SD-WAN with an Azure Virtual WAN.

What should you include in the solution?

你们公司有五名职员。每个办公室都有一个防火墙设备和一个本地互联网连接。官方连接到第三方SD-WAN。

您有一个Azure订阅，该订阅包含一个名为Vnet1的虚拟网络。Vnet1包含一个名为Gateway1的虚拟网络网关。每个

Offi ce通过使用站点到站点VPN连接连接到Gateway1。

您需要将第三方SD-WAN替换为Azure虚拟广域网。

您应该在解决方案中包括什么？

Which type of resource requires IP addresses in the subnets?

您正在为Azure虚拟网络中的子网计划IP寻址。

哪种类型的资源需要子网中的IP地址？

You plan to deploy a hub and spoke topology by using virtual network peering.

You need to confi gure VNet1 as the hub network. The solution must meet the following requirements:

• Support transitive routing between spokes.

• Maximize network throughput.

What should you include in the solution?

您有一个Azure订阅垫，其中包含名为VNet1、VNet2、VNet3和VNet4的巡回虚拟网络。

您计划通过使用虚拟网络对等来部署轮辐式拓扑。

您需要将VNet1配置为集线器网络。解决方案必须满足以下要求：

•支持轮辐之间的传递路由。

•最大限度地提高网络吞吐量。

您应该在解决方案中包括什么？

Username and password

-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: User-12345678@cloudslice.onmicrosoft.com

Azure Password: xxxxxxxxxx

-

If the Azure portal does not load successfully in the browser, press CTRL-K to reload the

Portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678

-

You need to ensure that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address. The solution must

Minimize administrative effort when adding hosts to the subnet.

To complete this task, sign in to the Azure portal

用户名和密码

-

根据需要使用以下登录凭据：

要输入您的用户名，请将光标放在“登录”框中，然后单击下面的用户名。

要输入密码，请将光标放在“输入密码”框中，然后单击下面的密码。

Azure用户名：User-12345678@cloudslice.onmicrosoft.com

Azure密码：xxxxxxxxxx

-

如果Azure门户未在浏览器中成功加载，请按CTRL-K重新加载

新浏览器选项卡中的门户。

以下信息仅用于技术支持目的：

实验室实例：12345678

-

您需要确保部署到子网3-2的所有主机都使用相同的静态公共IP地址连接到互联网。解决方案必须

将主机添加到子网时尽可能减少管理工作量。

若要完成此任务，请登录Azure门户

（含图）

Username and password

-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: User-12345678@cloudslice.onmicrosoft.com

Azure Password: xxxxxxxxxx

-

If the Azure portal does not load successfully in the browser, press CTRL-K to reload the

Portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678

-

You need to ensure that subnet 4-3 can accommodate 507 hosts.

To complete this task, sign in to the Azure portal.

用户名和密码

-

根据需要使用以下登录凭据：

要输入您的用户名，请将光标放在“登录”框中，然后单击下面的用户名。

要输入密码，请将光标放在“输入密码”框中，然后单击下面的密码。

Azure用户名：User-12345678@cloudslice.onmicrosoft.com

Azure密码：xxxxxxxxxx

-

如果Azure门户未在浏览器中成功加载，请按CTRL-K重新加载

新浏览器选项卡中的门户。

以下信息仅用于技术支持目的：

实验室实例：12345678

-

您需要确保子网4-3可以容纳507台主机。

若要完成此任务，请登录Azure门户。

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You confi gure the application gateway to direct traffi c to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.（含图）

You need to ensure that the URL is accessible through the application gateway from any IP address.

Solution: You confi gure a custom cookie and an exclusion rule.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有一个已启用Azure Web应用程序防火墙（WAF）的Azure应用程序网关。

您可以配置应用程序网关，将traffic直接发送到应用程序网关的URL。

您试图访问该URL，但收到一个HTTP 403错误。您可以查看诊断日志并发现以下错误。

您需要确保可以通过应用程序网关从任何IP地址访问URL。

解决方案：您配置了一个自定义cookie和一个排除规则。

这符合目标吗？

The subscription contains the subnets shown in the following table.（含图）

The subscription contains the virtual machines shown in the following table.（含图）

The subscription contains the local network gateways shown in the following table.（含图）

There is a Site-to-Site VPN connection to each local network gateway.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

您的Azure订阅包含下表中显示的路由表和路由。

订阅包含下表中显示的子网。

订阅包含下表中显示的虚拟机。

订阅包含下表中显示的本地网络网关。

每个本地网络网关都有一个站点到站点的VPN连接。

对于以下每个语句，如果该语句为true，请选择“是”。否则，请选择“否”。

注意：每个正确的选择值一分。

（含图）

Backend pool named Pool1. Pool1 targets an Azure virtual machine scale set named VMSS1.

You deploy another virtual machine scale set named VMSS2.

You need to confi gure AGW1 to direct all traffi c for http://www.adatum.com to VMSS2.

The solution must ensure that requests to http://www.contoso.com continue to be directed to Pool1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

您有一个名为AGW1的Azure应用程序网关，该网关具有名为Rule1的路由规则。规则1指导交通http://www.contoso.com到

名为Pool1的后端池。Pool1的目标是名为VMSS1的Azure虚拟机规模集。

您部署了另一个名为VMSS2的虚拟机扩展集。

您需要配置AGW1来指导所有的运输http://www.adatum.com至VMSS2。

解决方案必须确保http://www.contoso.com继续定向到池1。

你应该执行哪三个动作？每个正确的答案都是解决方案的一部分。

注意：每个正确的选择值一分。

TM1 uses the performance traffic-routing method and has the endpoints shown in the following table.（含图）

TM2 uses the weighted traffi c-routing method with MinChildEndpoint = 2 and has the endpoints shown in the following table.（含图）

TM3 uses priority traffi c-routing method and has the endpoints shown in the following table.（含图）

The App2, App4, and App6 endpoints have a degraded monitoring status.

To which endpoint is traffi c directed? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point（含图）

Might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure application gateway that has Azure Web Application Firewall (WAF) enabled.

You confi gure the application gateway to direct traffi c to the URL of the application gateway.

You attempt to access the URL and receive an HTTP 403 error. You view the diagnostics log and discover the following error.（含图）

You need to ensure that the URL is accessible through the application gateway from any IP address.

Solution: You add a rewrite rule for the host header.

Does this meet the goal?

注意：这个问题是呈现相同场景的一系列问题的一部分。该系列中的每个问题都包含一个独特的解决方案

可能达到既定目标。有些问题集可能有多个正确的解决方案，而另一些问题集可能没有正确的解决方法。

回答完本节中的问题后，您将无法返回。因此，这些问题将不会出现在复习屏幕上。

您有一个已启用Azure Web应用程序防火墙（WAF）的Azure应用程序网关。

您可以配置应用程序网关，将traffic直接发送到应用程序网关的URL。

您试图访问该URL，但收到一个HTTP 403错误。您可以查看诊断日志并发现以下错误。

您需要确保可以通过应用程序网关从任何IP地址访问URL。

解决方案：为主机标头添加重写规则。

这符合目标吗？

You have the routing rules shown in the following table.（含图）

Which rule will apply to each incoming request? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point

Hot Area:（含图）

您有一个Azure Front Door实例，该实例提供对web应用程序的访问。该网络应用程序使用www.contoso.com的主机名。

下表中显示了路由规则。

哪个规则将适用于每个传入请求？要回答，请在回答区域中选择相应的选项。

注意：每个正确的选择值一分

热门区域：