Practice Test GeeksAZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test
← All AZ-700 Flashcard Decks

Network Security Flashcards

5 cards from real AZ-700 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 5 Network Security flashcards as text

  1. What is the purpose of a Network Security Group (NSG) in Azure?

    Answer: To filter network traffic to and from Azure resources

    A Network Security Group (NSG) acts as a virtual firewall for Azure resources, allowing or denying inbound and outbound network traffic based on defined rules. NSGs provide a fundamental layer of security by controlling access to VMs, subnets, and other network interfaces. They help protect resources from unauthorized access and malicious traffic.

  2. Which Azure service provides protection against Distributed Denial of Service (DDoS) attacks?

    Answer: Azure DDoS Protection

    Azure DDoS Protection is a dedicated service designed to safeguard Azure resources from Distributed Denial of Service (DDoS) attacks. It provides always-on traffic monitoring and automatic mitigation capabilities to protect applications and services from volumetric, protocol, and resource-layer attacks. This ensures the availability and performance of your Azure-hosted applications.

  3. In Azure, what is the main function of a VPN Gateway?

    Answer: To establish secure connections between on-premises networks and Azure VNets

    An Azure VPN Gateway is used to create secure, encrypted connections between an on-premises network and an Azure Virtual Network (VNet) over the public internet. This enables hybrid cloud scenarios, allowing resources in Azure to communicate securely with resources in your datacenter. It's essential for extending your corporate network into Azure.

  4. What is the role of Azure Bastion in network security?

    Answer: To provide a secure, managed connection to virtual machines (VMs) without a public IP

    Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP/SSH connectivity to your virtual machines directly through the Azure portal over SSL. It eliminates the need for public IP addresses on your VMs, significantly enhancing security by preventing direct exposure to the internet and reducing the attack surface.

  5. Which Azure feature allows you to isolate and protect applications running in a virtual network?

    Answer: Azure Application Gateway with Web Application Firewall (WAF)

    Azure Application Gateway, especially when configured with its Web Application Firewall (WAF) capability, provides robust protection and isolation for web applications. The WAF filters malicious web traffic and protects against common web vulnerabilities like SQL injection and cross-site scripting. This ensures applications running in a virtual network are shielded from external threats.