AZ-700 Network Security and Compliance 5

Question 1

You need to allow Azure Monitor to collect diagnostic logs from resources in a private VNet without public internet exposure. What should you configure?

Accepted Answer

Deploy Private Endpoints for Azure Monitor (Azure Monitor Private Link Scope)

Answer

Azure Monitor Private Link Scope (AMPLS) uses Private Endpoints to allow diagnostic data collection from VNet resources without traversing the public internet.

Question 2

Which Azure Firewall rule collection type should be used to allow an on-premises server to initiate RDP sessions to Azure VMs?

Accepted Answer

Network rule collection

Answer

Network rule collections handle Layer 4 traffic (TCP/UDP/ICMP) based on source/destination IP and port, which is appropriate for allowing RDP on port 3389.

Question 3

A security audit requires that all Azure resources have no public IP addresses. Which Azure Policy effect enforces this during resource deployment?

Accepted Answer

Deny

Answer

The Deny effect prevents deployment of resources that violate the policy condition, such as having a public IP address assigned.

Question 4

You are designing a zero-trust network for Azure. Which combination of services best enforces micro-segmentation between application tiers?

Accepted Answer

NSGs on each subnet combined with Azure Firewall for inter-tier inspection

Answer

NSGs on each subnet enforce micro-segmentation at the subnet level, while Azure Firewall provides stateful deep inspection for traffic crossing tier boundaries.

Question 5

Which feature in Azure Firewall allows it to identify and control traffic based on web categories such as gambling or social media?

Accepted Answer

Web Categories filtering

Answer

Azure Firewall Premium's Web Categories feature classifies URLs into categories (e.g., gambling, social media) and allows you to allow or deny entire categories.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Network Security and Compliance 5