Azure Networking

Which of the following options is first evaluated for inbound network traffic?

How could an administrator use service tags when configuring network security?

Which of the following features would an administrator use to monitor, diagnose, review metrics, and enable or disable logs for resources in a Microsoft Azure virtual network?

You have an Azure Active Directory Domain Services (Azure AD DS) domain named aadds.contoso.com.
You have an Azure virtual network named Vnet1. Vnet1 contains two virtual machines named VM1 and VM2 that run Windows Server. VM1 and VM2 are joined to aadds.contoso.com.
You create a new Azure virtual network named Vnet2. You add a new server named VM3 to Vnet2.
When you attempt to join VM3 to aadds.contoso.com, you get an error message that the domain cannot be found.
You need to ensure that you can join VM3 to aadds.contoso.com.

You have a Site-to-Site VPN between an on-premises network and an Azure VPN gateway. BGP is disabled for the Site-to-Site VPN.
You have an Azure virtual network named Vnet1 that contains a subnet named Subnet1. Subnet1 contains a virtual machine named Server1.
You can connect to Server1 from the on-premises network.
You extend the address space of Vnet1. You add a subnet named Subnet2 to Vnet1. Subnet2 uses the extended address space. You deploy an Azure virtual machine named Server2 to Subnet2.

You have an Azure virtual machine named VM1 that has the Web Server (IIS) server role installed. VM1 hosts a critical line-of-business (LOB) application.
After the security team at your company deploys a new security baseline to VM1, users begin reporting that the application is unresponsive.
You suspect that the security baseline has caused networking issues.
You need to perform a network trace on VM1.
What should you do?

You have an on-premises network and an Azure virtual network.
You establish a Site-to-Site VPN connection from the on-premises network to the Azure virtual network, but the connection frequently disconnects.
You need to debug the IPsec tunnel from Azure.
Which Azure VPN Gateway diagnostic log should you review?

You have an Azure subscription that contains a user named User1 and the resources shown in the following table.



User1 has a computer named Computer1 that runs Windows 11. User1 works from home and establishes a Point-to-Site (P2S) connection to GW1 to access AppSvr1.

You deploy the resources shown in the following table.

You have an Azure subscription that contains a virtual network named VNet1. VNet1 is hosted in the East US Azure region.

You deploy an Azure Virtual WAN with a virtual hub named VHub1 to the East US region.

You need to ensure that network traffic from VNet1 can reach VHub1.

What should you create?

Select only one answer.

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com.

You have an Azure subscription that contains a virtual machine named Server1 that runs Windows Server.

You need to configure Server1 as a domain controller for contoso.com.

Which two actions should you perform? Each correct answer presents part of the solution.

Select all answers that apply.