Which service enables network traffic inspection and filtering in Azure?
AAzure Firewall
BAzure Load Balancer
CAzure VPN Gateway
DAzure Application Gateway
Explanation
Azure Firewall provides built-in traffic inspection and filtering capabilities, while others do not.
Q92
A company needs to connect its on-premises network to Azure securely. What is the best solution?
AAzure Application Gateway
BSite-to-Site VPN
CExpressRoute
DAzure Traffic Manager
Explanation
ExpressRoute provides a private and dedicated connection, superior to VPN for reliability and speed.
Q93
You are configuring routing for a virtual network. What happens if you set a user-defined route with a lower priority than the default system route?
AUser-defined route is preferred
BSystem route is preferred
CTraffic will be blocked
DRoute priority is ignored
Explanation
The system route has a higher priority, so it will always take precedence over lower priority user-defined routes.
Q94
Which service is used for Azure DNS hosting?
AAzure Virtual Network
BAzure Traffic Manager
CAzure DNS
DAzure Load Balancer
Explanation
Azure DNS is specifically designed for DNS hosting, while the others offer different networking services.
Q95
A company needs to ensure that their Azure storage account can only be accessed from specific virtual networks. Which feature should they implement?
ANetwork Security Group
BStorage Account Firewall
CVirtual Private Network
DExpressRoute
Explanation
The Storage Account Firewall allows access control from specific networks, while the others do not restrict storage access directly.
Q96
You are configuring a VPN Gateway in Azure. What happens if the Gateway SKU is set to 'VpnGw1' instead of 'VpnGw2'?
AHigher throughput is enabled
BOnly basic features available
CLimited site-to-site connections
DNo impact on performance
Explanation
'VpnGw1' has lower capacity for connections compared to 'VpnGw2', impacting performance when scaling.
Q97
Which Azure service enables secure access to applications?
AAzure VPN Gateway
BAzure Application Gateway
CAzure Firewall
DAzure ExpressRoute
Explanation
Azure Application Gateway provides secure application access through Web Application Firewall capabilities, while others serve different purposes.
Q98
A company needs to protect Azure resources from DDoS attacks. What should they implement?
AAzure Load Balancer
BAzure DDoS Protection
CAzure Bastion
DAzure Traffic Manager
Explanation
Azure DDoS Protection is specifically designed to protect against DDoS attacks, unlike the other options.
Q99
You are configuring VNet Peering between two VNets. What happens if the VNets are in different regions?
APeering is not possible
BPeering is automatically established
CGlobal VNet Peering can be used
DTraffic cannot traverse the peering
Explanation
Global VNet Peering enables inter-region peering, unlike local-only options.
Q100
Which service is used to connect on-premises networks securely to Azure?
AAzure VPN Gateway
BAzure Blob Storage
CAzure SQL Database
DAzure Functions
Explanation
Azure VPN Gateway provides secure connections, whereas the other options are unrelated services.