Microsoft Azure

Designing and Implementing Microsoft Azure Networking Solutions

AZ-700

The AZ-700 exam tests your skills in designing and implementing Azure networking solutions.

147 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 71–80 of 147

Q71

A company needs to secure their Azure virtual network from unauthorized traffic. What is the best approach?

  • A Network Security Groups
  • B Azure Firewall
  • C Azure ExpressRoute
  • D Virtual Network Peering
Explanation Network Security Groups are designed for controlling access, unlike the other options.
Q72

What happens when you incorrectly configure a network security group in Azure?

  • A All traffic is allowed
  • B All traffic is blocked
  • C Specific traffic is blocked
  • D No impact on network traffic
Explanation Incorrect configurations can lead to specific traffic being blocked based on rules set in the NSG.
Q73

Which Azure service is primarily used for private network connectivity between on-premises and Azure?

  • A Azure VPN Gateway
  • B Azure Content Delivery Network
  • C Azure Load Balancer
  • D Azure Traffic Manager
Explanation Azure VPN Gateway provides secure communication with VPN connections, while others serve different networking functions.
Q74

A company needs to route traffic from Azure to an on-premises network through a secure and reliable method. What should they implement?

  • A ExpressRoute
  • B Site-to-Site VPN
  • C Point-to-Site VPN
  • D Azure Bastion
Explanation ExpressRoute provides a dedicated private connection, while the other options may not offer the same reliability or performance.
Q75

You are configuring Network Security Groups (NSGs) for your Azure resources. What happens if you have conflicting rules within the same NSG?

  • A Allow rule always takes precedence
  • B Deny rule always takes precedence
  • C Last rule processed overrides previous
  • D Conflict will cause resource to fail
Explanation The last rule processed takes precedence in NSG, making option C correct, while A and B simplify it incorrectly, and D is not applicable.
Q76

Which Azure service offers scalable network traffic management?

  • A Azure Traffic Manager
  • B Azure DevOps
  • C Azure Functions
  • D Azure Logic Apps
Explanation Azure Traffic Manager balances traffic, while others do not focus on traffic management.
Q77

A company needs to secure communication between its on-premises data center and Azure. What should they use?

  • A Azure VPN Gateway
  • B Azure App Gateway
  • C Azure Front Door
  • D Azure Load Balancer
Explanation Azure VPN Gateway provides secure site-to-site connections, unlike the others.
Q78

What happens when configuring an Azure Public IP as Static?

  • A IP can be reassigned anytime
  • B IP address remains fixed
  • C IP lease duration changes
  • D IP cannot be used in resources
Explanation A Static IP remains fixed unless released, while dynamic can change.
Q79

Which Azure service allows for automatic scale-up or down based on traffic?

  • A Azure Load Balancer
  • B Azure Application Gateway
  • C Azure Traffic Manager
  • D Azure Virtual Network
Explanation Azure Application Gateway can automatically scale based on incoming traffic, unlike the other options.
Q80

A company needs to securely connect its on-premises network to Azure. Which service should they use?

  • A Azure Bastion
  • B Azure VPN Gateway
  • C Azure ExpressRoute
  • D Azure Front Door
Explanation Azure ExpressRoute provides a private connection, which is more secure than the other options.