You have an Azure subscription that is linked to a Microsoft Entra tenant.
The subscription contains a virtual network named VNet1, a storage account named storage1, an Azure App Service web app named Appl. and an Azure SQL database named DB1. VNet1 contains two subnets named Subnet1 and Subnet2. Subnet 1 and Subnet2 each has a subnet mask of 255.255.255.224.
You plan to perform the following actions:
• On Subnet1. configure a service endpoint to connect to storage1 and a service endpoint to connect to the Microsoft Entra tenant.
• On Subnet2. configure a private endpoint to connect to App1 and a private endpoint to connect to DB1
How many IP addresses will be available on each subnet once the planned actions are complete? To answer, select the appropriate options in the answer area.
NOTE: Each correct answer is worth one point.

Task 1
You plan to deploy a firewall to subnetl-2. The firewall will have an IP address of 10.1.2.4.
You need to ensure that traffic from subnetl-1 to the IP address range of 192.168.10.0/24 is routed through the firewall that will be deployed to subnetl-2. The solution must be achieved without using dynamic routing protocols.
You have an on-premises datacenter named DC1 that contains two routers
You have an Azure subscription. The subscription contains a virtual network named VNet1 and a zone-redundant ExpressRoute virtual network gateway named GW1 that uses the ErGw3Az SKU. GW1 is attached to VNet1.
DO is connected to VNet1 by using an ExpressRoute Standard circuit named Circuits The DC1 routers are configured as endpoints for Circuit1. Circuit1 traffic traverses two physical links.
During a link outage, the connection takes three minutes to fail over
You need to ensure that failovers between the links take less than one second
What should you do?
You have an Azure subscription. The subscription contains an Azure application gateway that has the following configurations:
• Name: AppGW1
• Tier Standard V2
• Autoscaling: Disabled
You create a user named User1.
You need to ensure that User1 can change the tier of AppGW1. The solution must use the principle of least privilege.
Which role should you assign to User1. and to which tiers can AppGW1 be changed? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
