AZ-304 Azure Network Infrastructure Design 3

Question 1

Which Azure networking feature allows you to connect two VNets in different Azure regions so they communicate over the Microsoft backbone network?

Accepted Answer

Global VNet Peering

Answer

VNet Peering (local)

Answer

VPN Gateway VNet-to-VNet

Answer

ExpressRoute Global Reach

Question 2

A DDoS protection plan is required for all production virtual networks in an enterprise. Which DDoS Protection tier provides adaptive tuning and attack analytics?

Accepted Answer

DDoS Network Protection

Answer

DDoS Basic (default platform protection)

Answer

DDoS IP Protection

Answer

Azure Firewall Premium

Question 3

Which Azure service provides centralized, scalable management of routing and security for a large number of branch offices connecting to Azure?

Accepted Answer

Azure Virtual WAN

Answer

Hub-and-spoke with Azure Firewall

Answer

Azure VPN Gateway with multiple connections

Answer

Azure Route Server

Question 4

An architect must ensure that a web application is protected against SQL injection and cross-site scripting attacks. Which Azure service provides this at the network layer?

Accepted Answer

Azure Web Application Firewall (WAF)

Answer

Network Security Groups

Answer

Azure DDoS Protection

Answer

Azure Firewall

Question 5

What is the purpose of Azure Route Server in a hub-and-spoke network design?

Accepted Answer

It enables dynamic BGP route exchange between NVAs and Azure VNets

Answer

It replaces Azure Firewall for traffic inspection

Answer

It provides DNS resolution across peered VNets

Answer

It terminates ExpressRoute circuits

Question 6

Which subnet delegation concept in Azure allows a specific Azure service to inject network interfaces directly into a VNet subnet?

Accepted Answer

Subnet Delegation

Answer

Service Endpoints

Answer

Private Link Service

Answer

VNet Integration