AZ-305 Azure Networking Architecture Design 2

Question 1

Your web application is hosted in Azure and needs to be protected against OWASP top-10 web vulnerabilities at the network edge. Which service should you enable?

Accepted Answer

Azure Web Application Firewall (WAF)

Answer

Azure DDoS Protection Standard

Answer

Azure Firewall Premium with IDPS

Answer

Network Security Groups

Question 2

You are designing a solution where Azure VMs need outbound internet access but must not have public IP addresses. Which managed service provides this?

Accepted Answer

Azure NAT Gateway

Answer

Azure Bastion

Answer

Azure Load Balancer outbound rules

Answer

Azure VPN Gateway

Question 3

A company needs secure remote access to Azure VMs without exposing RDP/SSH ports to the internet. Which Azure service should you design for this?

Accepted Answer

Azure Bastion

Answer

Just-In-Time VM access in Defender for Cloud

Answer

Point-to-Site VPN

Answer

Azure Firewall DNAT rules

Question 4

Which Azure Load Balancer SKU is required to support cross-zone load balancing, global load balancing, and availability zones?

Accepted Answer

Standard SKU

Answer

Basic SKU

Answer

Gateway SKU

Answer

Premium SKU

Question 5

You need to design DNS resolution so that VMs in multiple VNets can resolve the private DNS names of resources in any of those VNets. Which service should you use?

Accepted Answer

Azure Private DNS zones with VNet links

Answer

Deploy a custom DNS server in each VNet

Answer

Azure Public DNS zones

Answer

Azure Traffic Manager DNS profiles

Question 6

An application requires an ExpressRoute connection with 99.99% availability SLA. What design achieves this?

Accepted Answer

ExpressRoute circuit with a backup Site-to-Site VPN

Answer

Single ExpressRoute circuit with Local SKU

Answer

Two ExpressRoute circuits from different peering locations with ExpressRoute Global Reach

Answer

Single ExpressRoute circuit with Zone-Redundant VNet Gateway