AZ-700 Networking Fundamentals 2 — Questions and Answers
Question 1: Which Azure service provides a fully managed, cloud-based network address translation (NAT) gateway to allow outbound internet connectivity from a virtual network?
- Azure VPN Gateway
- Azure NAT Gateway (Correct answer)
- Azure Application Gateway
- Azure Bastion
Correct answer: Azure NAT Gateway
Azure NAT Gateway provides outbound-only internet connectivity for resources in a virtual network without exposing inbound internet access.
Question 2: What is the default behavior when two Azure Virtual Networks are NOT peered together?
- They can communicate using public IPs only
- They are completely isolated and cannot communicate (Correct answer)
- They communicate via Azure backbone automatically
- They share DNS resolution by default
Correct answer: They are completely isolated and cannot communicate
Virtual networks in Azure are logically isolated from each other by default; communication requires explicit configuration such as VNet peering or VPN.
Question 3: Which IP address range is NOT a valid private IP address range per RFC 1918?
- 10.0.0.0/8
- 172.16.0.0/12
- 192.168.0.0/16
- 198.51.100.0/24 (Correct answer)
Correct answer: 198.51.100.0/24
198.51.100.0/24 (TEST-NET-2) is reserved for documentation purposes, not private use; the RFC 1918 ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.
Question 4: In Azure, what is the minimum subnet size allowed when creating a subnet in a virtual network?
- /28 (16 addresses)
- /29 (8 addresses) (Correct answer)
- /30 (4 addresses)
- /32 (1 address)
Correct answer: /29 (8 addresses)
Azure requires a minimum subnet prefix of /29, which provides 8 IP addresses (3 usable after reserving 5 for Azure infrastructure).
Question 5: Which OSI layer does the Azure Application Gateway primarily operate at?
- Layer 2 (Data Link)
- Layer 3 (Network)
- Layer 4 (Transport)
- Layer 7 (Application) (Correct answer)
Correct answer: Layer 7 (Application)
Azure Application Gateway is a Layer 7 load balancer that can make routing decisions based on HTTP attributes such as URI path or host headers.
Question 6: What type of routing does Azure use by default to forward traffic between subnets within the same virtual network?
- Static routes configured by the user
- System routes managed by Azure (Correct answer)
- Border Gateway Protocol (BGP)
- Policy-based routing
Correct answer: System routes managed by Azure
Azure automatically creates system routes for each subnet to enable traffic flow between subnets in the same VNet without any user configuration.
Question 7: Which protocol is used by Azure VPN Gateway for site-to-site connections to establish IPsec tunnels?
- OpenVPN only
- IKEv1 and IKEv2 (Correct answer)
- SSL/TLS only
- GRE tunneling
Correct answer: IKEv1 and IKEv2
Azure VPN Gateway supports both IKEv1 and IKEv2 for establishing IPsec/IKE tunnels in site-to-site VPN connections.
AZ-700 Networking Fundamentals 2
Which Azure service provides a fully managed, cloud-based network address translation (NAT) gateway to allow outbound internet connectivity from a virtual network?