Microsoft Azure
Designing and Implementing Microsoft Azure Networking Solutions
AZ-700
The AZ-700 exam tests your skills in designing and implementing Azure networking solutions.
147 questions
0 views
Free
Questions 61–70 of 147
Which Azure service is used for traffic management across global regions?
-
A
Azure Traffic Manager
-
B
Azure Load Balancer
-
C
Azure Application Gateway
-
D
Azure CDN
Explanation
Azure Traffic Manager optimally routes traffic globally, while others manage local or regional traffic.
A company needs to connect their on-premises network securely to Azure. What is the best solution?
-
A
Site-to-Site VPN
-
B
Azure ExpressRoute
-
C
VNet Peering
-
D
Azure Firewall
Explanation
Azure ExpressRoute offers a private connection, while VPNs rely on public internet for security.
What happens when an NSG rule denies traffic on a specific port?
-
A
Traffic is allowed
-
B
Traffic is logged only
-
C
Traffic is completely blocked
-
D
Traffic is monitored
Explanation
Denial rules in NSGs completely block specified traffic, ensuring it cannot pass.
Which Azure service is best for monitoring application performance?
-
A
Azure Application Insights
-
B
Azure Storage
-
C
Azure Active Directory
-
D
Azure DevOps
Explanation
Azure Application Insights is designed specifically for monitoring application performance; the others serve different purposes.
You are configuring a hub-and-spoke network topology. Which virtual network role is central to the topology?
-
A
Hub VNet
-
B
Spoke VNet
-
C
Gateway VNet
-
D
Peering VNet
Explanation
The Hub VNet connects all spoke VNets; the others are indirectly connected.
What happens when an Azure VM's public IP address is deallocated?
-
A
IP address is released to other users
-
B
VM loses public connectivity
-
C
Public IP is retained for future use
-
D
Network security is compromised
Explanation
The VM cannot be accessed publicly; the other options misrepresent the deallocation effect.
Which service allows for private access to Azure resources without exposure to the public internet?
-
A
Azure Private Link
-
B
Azure VNet Peering
-
C
Azure VPN Gateway
-
D
Azure Network Security Group
Explanation
Azure Private Link provides private connectivity, whereas other options don't specifically create private access.
A company needs to connect its on-premises network to Azure securely. Which method should they prioritize?
-
A
Site-to-Site VPN
-
B
Point-to-Site VPN
-
C
Azure Bastion
-
D
ExpressRoute
Explanation
ExpressRoute offers dedicated, private connections, while VPN methods use the public internet.
What happens when a subnet's network security group (NSG) rules deny inbound traffic for HTTP?
-
A
All traffic is allowed
-
B
Trafic is only logged
-
C
HTTP traffic is blocked
-
D
Subnet gets deleted
Explanation
Denial rules directly block HTTP, whereas other options misinterpret NSG functionality.
Which Azure service allows routing of traffic based on URL paths?
-
A
Azure Load Balancer
-
B
Azure Application Gateway
-
C
Azure Traffic Manager
-
D
Azure VPN Gateway
Explanation
Azure Application Gateway provides URL-based routing, while the others do not offer this feature.