AZ-305 Azure Networking Architecture Design 2

Question 1

Your web application is hosted in Azure and needs to be protected against OWASP top-10 web vulnerabilities at the network edge. Which service should you enable?

Accepted Answer

Azure Web Application Firewall (WAF)

Answer

Azure WAF, deployable on Application Gateway or Front Door, inspects HTTP/S traffic against OWASP rule sets to block common web attacks.

Question 2

You are designing a solution where Azure VMs need outbound internet access but must not have public IP addresses. Which managed service provides this?

Accepted Answer

Azure NAT Gateway

Answer

Azure NAT Gateway provides outbound internet connectivity for VMs in a subnet without requiring public IPs on each VM.

Question 3

A company needs secure remote access to Azure VMs without exposing RDP/SSH ports to the internet. Which Azure service should you design for this?

Accepted Answer

Azure Bastion

Answer

Azure Bastion provides browser-based RDP/SSH connectivity to VMs over TLS 443 without requiring public IPs or open inbound ports on NSGs.

Question 4

Which Azure Load Balancer SKU is required to support cross-zone load balancing, global load balancing, and availability zones?

Accepted Answer

Standard SKU

Answer

Azure Load Balancer Standard SKU supports availability zones, cross-zone load balancing, and HTTPS health probes that the Basic SKU does not.

Question 5

You need to design DNS resolution so that VMs in multiple VNets can resolve the private DNS names of resources in any of those VNets. Which service should you use?

Accepted Answer

Azure Private DNS zones with VNet links

Answer

Azure Private DNS zones linked to multiple VNets allow resources in all linked VNets to resolve each other's DNS names without custom DNS servers.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 Azure Networking Architecture Design 2