AZ-304 Azure Network Infrastructure Design

Question 1

Which Azure networking service provides private connectivity from an on-premises network to Azure services over a dedicated private connection, bypassing the public internet?

Accepted Answer

Azure ExpressRoute

Answer

ExpressRoute creates dedicated private connections between on-premises infrastructure and Azure data centers through a connectivity provider, offering predictable latency and higher security than VPN.

Question 2

An architect needs to design a hub-and-spoke network topology in Azure. What is the primary benefit of this design?

Accepted Answer

It centralizes shared services and network appliances in the hub VNet

Answer

Hub-and-spoke topology centralizes shared resources like firewalls, DNS, and VPN gateways in the hub VNet, reducing cost and management overhead across multiple spoke VNets.

Question 3

Which Azure service allows you to deploy a managed network virtual appliance to inspect and filter all traffic between VNets and on-premises networks?

Accepted Answer

Azure Firewall

Answer

Azure Firewall is a managed, cloud-native network security service that provides threat intelligence-based filtering and FQDN-based application rules across VNet traffic.

Question 4

You need to expose a multi-tier web application to the internet with SSL termination and Web Application Firewall (WAF) capabilities. Which Azure service should you use?

Accepted Answer

Azure Application Gateway with WAF

Answer

Azure Application Gateway with WAF provides Layer 7 load balancing, SSL/TLS termination, and OWASP-based web application firewall protection for web applications.

Question 5

Which Azure Private DNS Zone feature allows VMs in a VNet to automatically register their DNS records without manual configuration?

Accepted Answer

Auto-registration

Answer

Auto-registration in Azure Private DNS Zones automatically creates and removes DNS A records when VMs in a linked VNet are created or deleted.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Azure Network Infrastructure Design