You are configuring an Azure Application Gateway for a public web application that must be accessible only over HTTPS. You have a wildcard certificate for *.contoso.com. The gateway has a single public IP. You need to ensure that requests to both www.contoso.com and api.contoso.com are served with valid TLS. What should you configure?

Create a single basic listener on port 443 and associate the wildcard certificate with it.

Create one multi-site listener for www.contoso.com and one basic listener for api.contoso.com, both on port 443.

Create two basic listeners on different ports (443 and 8443) and associate the wildcard certificate with each.

Create two multi-site listeners, both on port 443, and associate the wildcard certificate with each listener.

Your backend servers require mutual TLS (mTLS) authentication. You have configured the Application Gateway to use a trusted root certificate for the backend. However, the backend servers are rejecting connections from the gateway. What is the most likely cause?

The health probe is using HTTP instead of HTTPS.

The backend servers are not configured to trust the Application Gateway's public IP.

The Application Gateway's TLS version is not compatible with the backend servers.

The Application Gateway is not presenting a client certificate to the backend because the HTTP settings do not have a client certificate configured.

Microsoft Certified:Azure Network Engineer Associate

Domain 3Objective 2

Design and Implement Azure Application Gateway AZ-700 Practice Questions (Page 1)

Part of the Design and implement application delivery services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

15–20%of the exam

Questions 1–5

1application · medium
You are configuring an Azure Application Gateway for a public web application that must be accessible only over HTTPS. You have a wildcard certificate for *.contoso.com. The gateway has a single public IP. You need to ensure that requests to both www.contoso.com and api.contoso.com are served with valid TLS. What should you configure?
Select an answer first
2foundation · easy
Which protocol can be used by a custom health probe in Azure Application Gateway?
Select an answer first
3expert · hard
Your backend servers require mutual TLS (mTLS) authentication. You have configured the Application Gateway to use a trusted root certificate for the backend. However, the backend servers are rejecting connections from the gateway. What is the most likely cause?
Select an answer first
4application · medium
You are setting up an Azure Application Gateway for a web app that runs on Azure VMs in the same virtual network. The VMs are in a backend pool and you need to configure the backend pool to use the VMs' private IP addresses. Which backend pool target type should you use?
Select an answer first
5foundation · easy
An organization expects a predictable, steady amount of web traffic and wants to control costs by setting a fixed number of instances for their Azure Application Gateway. Which scaling option should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement Azure Application Gateway AZ-700 Practice Questions (Page 1)

Questions 1–5

Which protocol can be used by a custom health probe in Azure Application Gateway?

Your backend servers require mutual TLS (mTLS) authentication. You have configured the Application Gateway to use a trusted root certificate for the backend. However, the backend servers are rejecting connections from the gateway. What is the most likely cause?

You are setting up an Azure Application Gateway for a web app that runs on Azure VMs in the same virtual network. The VMs are in a backend pool and you need to configure the backend pool to use the VMs' private IP addresses. Which backend pool target type should you use?

An organization expects a predictable, steady amount of web traffic and wants to control costs by setting a fixed number of instances for their Azure Application Gateway. Which scaling option should they choose?

Keep studying — Design and implement application delivery services