AZ-700 Troubleshooting and Performance Optimization 4

Question 1

You need to optimize throughput for a VM running network-intensive workloads. The VM size supports it but throughput is still limited. What feature should you verify is enabled on the NIC?

Accepted Answer

Accelerated Networking

Answer

Accelerated Networking bypasses the host vSwitch using SR-IOV, significantly reducing latency and increasing network throughput for supported VM sizes.

Question 2

An Azure VPN Gateway is showing 'P2S client connections failing' after a certificate rotation. What is the most likely cause?

Accepted Answer

The VPN client profile was not re-downloaded after the new root certificate was uploaded

Answer

After uploading a new root certificate to the VPN gateway, clients must download and install the updated VPN client profile to trust the new certificate chain.

Question 3

Traffic between two peered VNets is passing through an NVA in a hub VNet. After adding a new spoke, traffic from the new spoke bypasses the NVA. What is missing?

Accepted Answer

A UDR on the new spoke's subnet pointing to the NVA as next hop

Answer

Without a UDR directing traffic to the NVA's IP as the next hop, traffic will route directly between peered VNets, bypassing inspection.

Question 4

A customer reports that their ExpressRoute-connected on-premises network can reach Azure VMs but cannot reach Azure PaaS services via private endpoints. What should be verified?

Accepted Answer

That the private DNS zone is linked to the VNet and on-premises DNS forwards to Azure DNS Private Resolver

Answer

Private endpoint DNS resolution requires on-premises DNS to forward private DNS zone queries to Azure, typically via DNS Private Resolver, and the zone must be linked to the VNet.

Question 5

An Azure Application Gateway WAF is blocking requests that should be legitimate. Logs show rule group 'REQUEST-942-APPLICATION-ATTACK-SQLI' is triggering. What is the best immediate mitigation without disabling WAF?

Accepted Answer

Create a custom WAF exclusion for the specific rule or request attribute causing false positives

Answer

WAF exclusions allow specific rules or request attributes to be excluded, eliminating false positives while keeping all other WAF protections active.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Troubleshooting and Performance Optimization 4