AZ-304 Azure Network Infrastructure Design 3

Question 1

Which Azure networking feature allows you to connect two VNets in different Azure regions so they communicate over the Microsoft backbone network?

Accepted Answer

Global VNet Peering

Answer

Global VNet Peering connects VNets in different Azure regions over the Microsoft global backbone, providing low-latency connectivity without the overhead of a VPN gateway.

Question 2

A DDoS protection plan is required for all production virtual networks in an enterprise. Which DDoS Protection tier provides adaptive tuning and attack analytics?

Accepted Answer

DDoS Network Protection

Answer

DDoS Network Protection provides adaptive real-time tuning, attack telemetry, diagnostics, and rapid response support — going beyond the baseline platform protection available to all Azure resources.

Question 3

Which Azure service provides centralized, scalable management of routing and security for a large number of branch offices connecting to Azure?

Accepted Answer

Azure Virtual WAN

Answer

Azure Virtual WAN is a networking service that provides optimized, automated branch-to-branch and branch-to-Azure connectivity with integrated routing, security, and SD-WAN integration.

Question 4

An architect must ensure that a web application is protected against SQL injection and cross-site scripting attacks. Which Azure service provides this at the network layer?

Accepted Answer

Azure Web Application Firewall (WAF)

Answer

Azure WAF (available on Application Gateway, Front Door, and CDN) inspects HTTP/HTTPS traffic and blocks OWASP Top 10 threats like SQL injection and XSS at Layer 7.

Question 5

What is the purpose of Azure Route Server in a hub-and-spoke network design?

Accepted Answer

It enables dynamic BGP route exchange between NVAs and Azure VNets

Answer

Azure Route Server allows Network Virtual Appliances (NVAs) to exchange routes dynamically with Azure VNets via BGP, eliminating the need to manually manage UDRs.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Azure Network Infrastructure Design 3