AZ-304 Azure Network Infrastructure Design 2

Question 1

Which Azure feature enables you to access Azure PaaS services (like Azure Storage and SQL) from a VNet using a private IP address, keeping traffic off the public internet?

Accepted Answer

Azure Private Link / Private Endpoints

Answer

VNet Service Endpoints

Answer

VNet Peering

Answer

Azure NAT Gateway

Question 2

Which Network Security Group (NSG) rule property determines the order in which rules are evaluated?

Accepted Answer

Priority

Answer

Rule name

Answer

Direction

Answer

Protocol

Question 3

An architect wants to inspect all outbound internet traffic from Azure VMs through a centralized appliance. Which routing technique must be configured?

Accepted Answer

User-Defined Routes (UDR) with a next hop to the appliance

Answer

BGP route advertisement

Answer

VNet Peering with gateway transit

Answer

Azure Traffic Manager policy

Question 4

Which Azure VPN Gateway SKU supports active-active configuration for higher availability and redundancy?

Accepted Answer

All SKUs above Basic

Answer

Basic

Answer

VpnGw1

Answer

VpnGw2

Question 5

What is the primary difference between Azure Front Door and Azure Traffic Manager for global load balancing?

Accepted Answer

Front Door operates at Layer 7 with TCP anycast; Traffic Manager is DNS-based Layer 4

Answer

Front Door uses BGP routing; Traffic Manager uses Anycast

Answer

Front Door is only for internal traffic; Traffic Manager is for public traffic

Answer

Front Door requires ExpressRoute; Traffic Manager uses VPN

Question 6

An architect needs to provide outbound internet connectivity for VMs in a subnet without assigning public IP addresses to each VM. Which service should be used?

Accepted Answer

Azure NAT Gateway

Answer

Azure Bastion

Answer

Azure Load Balancer outbound rules

Answer

Azure VPN Gateway