AZ-300 Azure Networking 2

Question 1

Which Azure routing feature allows you to override default system routes and direct traffic through a network virtual appliance (NVA)?

Accepted Answer

User-Defined Routes (UDR)

Answer

User-Defined Routes let you create custom routes in a route table to force traffic through an NVA or override Azure default routing.

Question 2

What does Azure DDoS Protection Standard provide beyond the Basic tier?

Accepted Answer

Adaptive tuning, attack analytics, rapid response support, and cost guarantees

Answer

DDoS Protection Standard adds adaptive real-time tuning, detailed attack telemetry, a rapid response team, and cost protection beyond the free Basic tier.

Question 3

Which Azure service provides a managed, cloud-native firewall with threat intelligence filtering and application FQDN rules?

Accepted Answer

Azure Firewall

Answer

Azure Firewall is a stateful, managed network security service with built-in high availability, threat intelligence, and FQDN filtering.

Question 4

What is the role of Azure Bastion in a network architecture?

Accepted Answer

Provides secure RDP/SSH to VMs without exposing public IPs

Answer

Azure Bastion is a fully managed PaaS service that provides secure RDP and SSH access to VMs directly through the Azure portal, without requiring public IP addresses.

Question 5

Which BGP attribute does Azure use when advertising routes to an on-premises network over ExpressRoute to influence path selection?

Accepted Answer

Community Tags

Answer

Azure uses BGP community tags to let customers control route preferences and apply policies for ExpressRoute path selection.

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 Azure Networking 2