AZ-304 Azure Network Infrastructure Design

Question 1

Which Azure networking service provides private connectivity from an on-premises network to Azure services over a dedicated private connection, bypassing the public internet?

Accepted Answer

Azure ExpressRoute

Answer

Azure VPN Gateway

Answer

Azure Virtual WAN

Answer

Azure Bastion

Question 2

An architect needs to design a hub-and-spoke network topology in Azure. What is the primary benefit of this design?

Accepted Answer

It centralizes shared services and network appliances in the hub VNet

Answer

It eliminates the need for network security groups

Answer

It automatically routes traffic between all spoke VNets

Answer

It removes the need for VNet peering

Question 3

Which Azure service allows you to deploy a managed network virtual appliance to inspect and filter all traffic between VNets and on-premises networks?

Accepted Answer

Azure Firewall

Answer

Azure Load Balancer

Answer

Azure Application Gateway

Answer

Network Security Groups

Question 4

You need to expose a multi-tier web application to the internet with SSL termination and Web Application Firewall (WAF) capabilities. Which Azure service should you use?

Accepted Answer

Azure Application Gateway with WAF

Answer

Azure Load Balancer (Standard)

Answer

Azure Traffic Manager

Answer

Azure Front Door

Question 5

Which Azure Private DNS Zone feature allows VMs in a VNet to automatically register their DNS records without manual configuration?

Accepted Answer

Auto-registration

Answer

DNS delegation

Answer

DNS forwarder

Answer

Conditional forwarding

Question 6

An organization needs to route traffic globally to the nearest healthy endpoint with failover capability using DNS-based routing. Which Azure service should be used?

Accepted Answer

Azure Traffic Manager

Answer

Azure Application Gateway

Answer

Azure Load Balancer

Answer

Azure Front Door