You have a VNet with two subnets: SubnetA and SubnetB. SubnetA has a route table with a route to 10.1.0.0/16 via an NVA. SubnetB has no route table. You are troubleshooting connectivity from a VM in SubnetA to a VM in SubnetB (10.1.0.4). The VM in SubnetA cannot reach the VM in SubnetB. What is the most likely cause?

The VM in SubnetB has a network security group blocking traffic.

The NVA is not configured to forward traffic between the subnets.

The VM in SubnetA does not have a public IP address.

The route table on SubnetA is not associated correctly.

In Azure, what is the primary purpose of service chaining with gateway transit?

To ensure high availability for workloads by replicating traffic across multiple regions

To route traffic through an intermediate network virtual appliance (NVA) for inspection or processing

To allow a peered VNet to use the hub's VPN gateway for encrypted connectivity

To provide direct connectivity between two VNets without using the internet

What is the effect of associating a route table with a subnet in Azure?

Network security rules are automatically created based on the routes in the table.

The routes are applied to all inbound traffic destined for resources in that subnet.

The subnet's IP address range is automatically updated to match the route table's address space.

The routes in the table are applied to all traffic originating from resources in that subnet.

Your company has 20 VNets in a single region. You need to enable connectivity between all VNets with minimal administrative overhead, and you also need to enforce a hub-and-spoke topology where all traffic between spokes flows through a central NVA. What should you do?

Create VNet peerings between every pair of VNets and add UDRs to each spoke to route through the NVA.

Create an Azure Virtual Network Manager instance, define a hub-and-spoke topology with the hub VNet as the central hub, and deploy the connectivity configuration.

Use Azure Route Server in each spoke to advertise routes to the hub NVA.

Create a single VNet and put all workloads in it.

What is the purpose of forced tunneling in Azure?

To encrypt all traffic between Azure resources and the internet

To route all inbound traffic from the internet through a specific gateway

To redirect all internet-bound traffic from Azure resources to an on-premises network for inspection

To block all internet-bound traffic from Azure resources

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 3

Design and Implement VNet Connectivity and Routing AZ-700 Practice Questions (Page 4)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

25–30%of the exam

Questions 16–20

16application · medium
You have a VNet with two subnets: SubnetA and SubnetB. SubnetA has a route table with a route to 10.1.0.0/16 via an NVA. SubnetB has no route table. You are troubleshooting connectivity from a VM in SubnetA to a VM in SubnetB (10.1.0.4). The VM in SubnetA cannot reach the VM in SubnetB. What is the most likely cause?
Select an answer first
17foundation · easy
In Azure, what is the primary purpose of service chaining with gateway transit?
Select an answer first
18foundation · easy
What is the effect of associating a route table with a subnet in Azure?
Select an answer first
19application · medium
Your company has 20 VNets in a single region. You need to enable connectivity between all VNets with minimal administrative overhead, and you also need to enforce a hub-and-spoke topology where all traffic between spokes flows through a central NVA. What should you do?
Select an answer first
20foundation · easy
What is the purpose of forced tunneling in Azure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.