Hotspot Question
You have an on-premises network and an Azure virtual network named VNet1.
You need to implement Azure Extended Network. The solution must minimize costs.
Which type of virtual machine should you deploy to VNet1, and which tool should you use to configure Azure Extended Network? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Explanation:
https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-extended-network#configuration-in-azure

Drag and Drop Question
You have an Azure Front Door instance named FrontDoor1. You deploy two instances of an Azure web app to different Azure regions.
You plan to provide access to the web app through FrontDoor1 by using the name app1.contoso.com.
You need to ensure that FrontDoor1 is the entry point for requests that use app1.contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:
Cname record to DNS for frontdoor to verify and then you can add the custom domain followed by the routing rule to app1.contoso.com.
https://docs.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain#associate-the-custom-domain-with-your-front-door
https://docs.microsoft.com/en-us/azure/frontdoor/quickstart-create-front-door

Hotspot Question
You have an Azure subscription that contains the resources shown in the following table.

The virtual network topology is shown in the following exhibit.

Firewall1 is configured as shown in following exhibit.

FirewallPolicy1 contains the following rules:
- Allow outbound traffic from Vnet1 and Vnet2 to the internet.
- Allow any traffic between Vnet1 and Vnet2.
No custom private endpoints, service endpoints, routing tables, or network security groups (NSGs) were created.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Explanation:
Box 1: Yes
You need to add User Defined Route to the Firewall Appliance from the subnets.
Box 2: No
The firewall is not a VPN Gateway, and we do not have any connection with On-Premises here.
Box 3: Yes
Azure Firewall can filter by web categories.
https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal
https://learn.microsoft.com/en-us/answers/questions/516530/how-to-set-up-a-multi-spoke-virtual-network-in-azu
https://learn.microsoft.com/en-us/azure/firewall/web-categories

Hotspot Question
You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that network traffic is routed over the Azure backbone network for the following scenarios:
- Traffic from SQLMIT to storage1
- Traffic from domain joined servers on VNet2 to storage
The solution must minimize costs.
What should you configure for each scenario? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You are planning the IP addressing for the subnets in Azure virtual networks.
Which type of resource requires IP addresses in the subnets?

• A. storage account
• B. internal load balancers
• C. service endpoint policies
• D. service endpoints