You suspect that a VM cannot reach the internet because of an incorrect user-defined route. Which diagnostic step should you perform first?

Create a new route table and associate it with the subnet.

View the effective routes for the VM's network interface.

Restart the VM to refresh its network configuration.

Delete the route table associated with the subnet.

You have a VNet with a subnet that contains VMs. You have a route table associated with the subnet that has a route for 10.0.0.0/16 with next hop 'Virtual appliance'. You notice that traffic to 10.0.1.10 is not being sent to the virtual appliance. You check the effective routes and see that the route for 10.0.0.0/16 is listed. What is the most likely cause?

The route table is not associated with the subnet.

The virtual appliance's IP address is incorrect.

A more specific route for 10.0.1.0/24 exists with next hop 'Virtual network'.

The virtual appliance is not running.

You have a VNet with a subnet that contains VMs. You need to force all outbound internet traffic from these VMs to go through an on-premises firewall via a site-to-site VPN. You create a route table with a route for 0.0.0.0/0 with next hop 'Virtual network gateway'. What else must you do?

Add a route for the on-premises address space with next hop 'Virtual network gateway'.

Enable 'Use remote virtual network gateways' on the VNet peering.

Associate the route table with the subnet.

Configure the local network gateway to use the firewall's public IP.

You are designing a hub-and-spoke topology in Azure. You need to ensure that traffic from a spoke VNet to the internet is inspected by a network virtual appliance (NVA) located in the hub VNet. Which two Azure features must you use together to achieve this?

Network security groups (NSGs) and VNet peering

VNet peering and Azure Firewall

VNet peering and user-defined routes (UDRs)

What is the primary function of Azure Virtual Network Manager (AVNM)?

To act as a distributed firewall for all virtual networks in an organization

To provide DNS resolution services for virtual networks

To centrally manage and apply connectivity configurations to multiple virtual networks

To provide a high-availability gateway for traffic between virtual networks

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 3

Design and Implement VNet Connectivity and Routing AZ-700 Practice Questions (Page 2)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

25–30%of the exam

Questions 6–10

6foundation · easy
You suspect that a VM cannot reach the internet because of an incorrect user-defined route. Which diagnostic step should you perform first?
Select an answer first
7expert · hard
You have a VNet with a subnet that contains VMs. You have a route table associated with the subnet that has a route for 10.0.0.0/16 with next hop 'Virtual appliance'. You notice that traffic to 10.0.1.10 is not being sent to the virtual appliance. You check the effective routes and see that the route for 10.0.0.0/16 is listed. What is the most likely cause?
Select an answer first
8application · medium
You have a VNet with a subnet that contains VMs. You need to force all outbound internet traffic from these VMs to go through an on-premises firewall via a site-to-site VPN. You create a route table with a route for 0.0.0.0/0 with next hop 'Virtual network gateway'. What else must you do?
Select an answer first
9foundation · easy
You are designing a hub-and-spoke topology in Azure. You need to ensure that traffic from a spoke VNet to the internet is inspected by a network virtual appliance (NVA) located in the hub VNet. Which two Azure features must you use together to achieve this?
Select an answer first
10foundation · easy
What is the primary function of Azure Virtual Network Manager (AVNM)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.