AZ-305 Azure Networking Architecture Design

Question 1

You need to design connectivity between 10 Azure virtual networks so that any VNet can communicate with any other VNet with minimal management overhead. Which design is recommended?

Accepted Answer

Use a hub-and-spoke topology with Azure Virtual WAN

Answer

Azure Virtual WAN provides a hub-and-spoke managed network that supports any-to-any connectivity without requiring full-mesh VNet peering.

Question 2

A workload requires that all outbound internet traffic from Azure VMs be inspected by a firewall before leaving Azure. Which service should you deploy in the hub VNet?

Accepted Answer

Azure Firewall

Answer

Azure Firewall is a managed, stateful network security service that can inspect and filter all outbound traffic using FQDN-based and network rules.

Question 3

Your application requires that Azure PaaS services like Azure SQL Database be accessible only from within your VNet and not over the public internet. Which feature should you use?

Accepted Answer

Private Endpoints

Answer

Private Endpoints assign a private IP from your VNet to a PaaS service, making it accessible only from your VNet while the public endpoint can be disabled.

Question 4

You need to connect an on-premises datacenter to Azure with a guaranteed bandwidth SLA, low latency, and private connectivity not traversing the internet. Which option should you recommend?

Accepted Answer

Azure ExpressRoute

Answer

ExpressRoute provides dedicated private connectivity between on-premises and Azure through a connectivity provider with an SLA-backed bandwidth guarantee.

Question 5

A global application needs to route users to the nearest healthy Azure region and perform SSL offloading. Which Azure service is best suited?

Accepted Answer

Azure Front Door

Answer

Azure Front Door is a global anycast CDN and load balancer that provides SSL offloading, WAF, and latency-based routing to the nearest healthy origin.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 Azure Networking Architecture Design