Microsoft Azure

Designing and Implementing Microsoft Azure Networking Solutions

AZ-700

The AZ-700 exam tests your skills in designing and implementing Azure networking solutions.

147 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 141–147 of 147

Q141

What happens when a network security group (NSG) rule is applied to a subnet?

  • A Applies to all VMs in the subnet
  • B Only applies to some VMs
  • C Overrides VM NSG rules
  • D Does not apply to any resources
Explanation NSG rules applied at the subnet level affect all VMs within that subnet, while others do not provide accurate descriptions of the behavior.
Q142

Which service provides a private connection to Azure services?

  • A Azure ExpressRoute
  • B Azure VPN Gateway
  • C Azure Load Balancer
  • D Azure Application Gateway
Explanation ExpressRoute enables private connections, while VPN Gateway offers encrypted connections over the public internet.
Q143

A company needs to restrict access to resources based on subnet. What should they use?

  • A Network Security Groups (NSGs)
  • B Azure Policy
  • C VPN Gateway
  • D Application Security Groups
Explanation NSGs can control traffic at the subnet level, whereas Azure Policy enforces resource governance.
Q144

You are configuring a VNet peering between two VNets in different regions. What happens?

  • A Traffic is routed efficiently.
  • B It requires global VNet peering.
  • C Only one VNet can communicate.
  • D No peering is allowed.
Explanation Global VNet peering allows VNets in different regions to communicate, while local peering is for same-region VNets.
Q145

Which service is best for connecting on-premises networks to Azure?

  • A ExpressRoute
  • B Azure Virtual Network
  • C VPN Gateway
  • D Azure Load Balancer
Explanation ExpressRoute provides a dedicated connection with lower latency, while the others use public networks or serve different functions.
Q146

A company needs to allow only specific users to access its virtual network. Which Azure feature should they use?

  • A Network Security Groups
  • B Azure Firewalls
  • C Role-Based Access Control
  • D Virtual Private Network
Explanation Network Security Groups (NSGs) control the flow of traffic to Azure resources, while RBAC is for permissions management not traffic filtering.
Q147

You are configuring Azure DNS for a web application. What happens when you create an alias record?

  • A Directs traffic to an IP address
  • B Points to another Azure resource
  • C Configures a custom domain
  • D Sets TTL for DNS resolution
Explanation Alias records point to Azure resources instead of traditional IP addresses, while the others represent different DNS configurations.