exam questions

Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 6 question 44 discussion

Actual exam question from Microsoft's AZ-301
Question #: 44
Topic #: 6
[All AZ-301 Questions]

DRAG DROP -
You are designing a network connectivity strategy for a new Azure subscription. You identify the following requirements:
✑ The Azure virtual machines on a subnet named Subnet1 must be accessible only from the computers in your London office.
✑ Engineers require access to the Azure virtual machine on a subnet named Subnet2 over the Internet on a specific TCP/IP management port.
✑ The Azure virtual machines in the West Europe Azure region must be able to communicate on all ports to the Azure virtual machines in the North Europe Azure region.
You need to recommend which components must be used to meet the requirements. The solution must minimize costs and administrative effort whenever possible.
What should you include in the recommendation? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer: Explanation

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Kaloy
Highly Voted 5 years, 5 months ago
Answer should be: A site-to-site VPN: The Azure virtual machine on Subnet1 must be accessible only from the computers in the London Office A Network Security Group (NSG): Engineers require access to the Azure virtual machines on Subnet2 over the Internet on a specific TCP/IP management port Virtual Network Peering: The Azure virtual machines in the West Europe region must be able to communicate on all ports to the Azure virtual machines in the North Europe region.
upvoted 50 times
...
6ppongi
Highly Voted 5 years, 7 months ago
I think that the anser of Site-to-Site and A Network Secuirty Group is correct. The Azure VM's in the West Europe region must be able to communicate on all ports to the Azure VM's in North Europe Region ⇒Vertual Network Peering is correct That's from two reasons below 1.The solution must minimize costs and administrative effort whenever possible 2.There is 「Global VNet peering - connecting VNets across Azure regions」  https://docs.microsoft.com/ja-jp/azure/virtual-network/virtual-network-peering-overview
upvoted 37 times
Daren
5 years, 1 month ago
Agree. Thank you!
upvoted 1 times
...
...
glam
Most Recent 4 years, 2 months ago
The Azue Virtual Machine on subnet1 must be accessible only from Computers in the london office (Answer - Site-to-Site) Engineers require access to Azure VM's on Subnet2 Over the internet on a specific TCP/IP Management port (Answer- A Network Secuirty Group) The Azure VM's in the West Europe region must be able to communicate on all ports to the Azure VM's in North Europe Region (Answer- VNet Peering)
upvoted 1 times
...
ihustle
4 years, 4 months ago
https://www.2passeasy.com/dumps/AZ-301-a-14222.html
upvoted 1 times
ihustle
4 years, 4 months ago
The answer for the 3rd question should be "Global VNET Peering", sadly this is not in the answer options. VNET Peering is different from Global VNET Peering.
upvoted 2 times
...
...
johndadas
4 years, 5 months ago
In the Exam 12/11/2020
upvoted 1 times
...
Explen
4 years, 7 months ago
box 3 should be Express Route Make your connections fast, reliable, and private Use Azure ExpressRoute to create private connections between Azure datacenters and infrastructure on your premises or in a colocation environment. ExpressRoute connections don't go over the public Internet, and they offer more reliability, faster speeds, and lower latencies than typical Internet connections. In some cases, using ExpressRoute connections to transfer data between on-premises systems and Azure can give you significant cost benefits. https://azure.microsoft.com/en-us/services/expressroute/#overview
upvoted 1 times
fiol82
4 years, 7 months ago
Express route is very expensive, VPN is cheaper, correct solutions: site to site vpn NSG VNet peering
upvoted 2 times
...
...
jw_duke
4 years, 8 months ago
https://vceplus.com/exams/4338/az-301/19603/microsoft-practicetest-az-301-v2019-10-27-by-regina-107q.pdf Question 30
upvoted 5 times
...
ravishankarj
4 years, 8 months ago
I agree to jcarlos comments. 'ONLY' is the key word which makes me to believe NSG for 1st question The Azure virtual machines on a subnet named Subnet1 must be accessible only from the computers in your London office.
upvoted 1 times
...
hybridpro
4 years, 8 months ago
I am gonna go against the consensus here and say that the answer to the first one should be "A New Vnet" since if subnet1 co-exists with any other subnet, let's say subnet2 in a VNet, subnet2 would be automatically able to access machines in subnet1 unless you add extra inbound rules on subnet1 with higher priority than default rules to block subnet2. Subnet1 needs to be in a separate VNet, connected with London office over a VPN or Express Route. Second Answer: A NSG Third Answer: Peering
upvoted 1 times
...
PJ_2020
4 years, 10 months ago
Global VNet peering available in all the regions
upvoted 1 times
...
chaudh
4 years, 10 months ago
1- Site2Site 2-NSG 3-New Vnet Global Vnet Peering supports following regions only: Europe: UK South (London), UK West (Cardiff), West Europe (Netherlands) Ref: https://azure.microsoft.com/en-in/updates/region-expansion-global-vnet-peering/
upvoted 2 times
...
jcarlos
4 years, 11 months ago
Q1 - A: NSG. You can use either site to site VPN or Expressroute to conect Subnet1 with London office, but none of them will meet the requirement of making the VM in Subnet1 ONLY accessible from London. They will continue being accessible for example from other subnets in the same network unless you use a NSG. Q2 - A:NSG Q3 -A: Virtual Network peering
upvoted 14 times
...
mbelferagui
4 years, 11 months ago
Q and A for this question should be as follow : The Azure virtual Machines on Subnet 1 Must be accessible only from the computers in the london Office --> Answer A site to Site VPN Engineers Require access to azure virtual machines on Subnet2 over the internet on a specific TCP/IP management port -->Answer : NSG (A Network Security Group) The Azure VMs in the west Europe region must be able to communicate on all ports to azure VMs in North Europe Region --> Answer : Virtual Network peering
upvoted 2 times
...
P0d
4 years, 11 months ago
https://issuu.com/ruthgriffithfreedumps/docs/_full-version_2019_braindump2go_new
upvoted 5 times
...
FailureIsnotAnOption
4 years, 11 months ago
Virtual network peering: Connect virtual networks within the same Azure region. Global virtual network peering: Connecting virtual networks across Azure regions. ... north and west are two different regions. If the option is there I think it would be global.
upvoted 1 times
...
Plumari
4 years, 11 months ago
Site-to-Site VPN NSG Vnet-to-Vnet
upvoted 4 times
...
bonps
4 years, 11 months ago
I agree with the answer lol
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago