AZ-700 Networking Fundamentals 3

Question 1

An organization needs to route traffic from an Azure subnet through a network virtual appliance (NVA) before it reaches the internet. Which Azure feature should be used?

Accepted Answer

User Defined Route (UDR)

Answer

User Defined Routes (UDRs) override Azure's default system routes, allowing you to direct traffic to a next-hop such as an NVA.

Question 2

What is the purpose of the 'effective routes' view in Azure Network Watcher?

Accepted Answer

It shows the combined routing table applied to a network interface

Answer

The effective routes view combines system routes, user-defined routes, and BGP routes to show the actual routing table used by a network interface.

Question 3

Which Azure networking component operates as a stateful packet filter and can be associated with both subnets and individual network interfaces?

Accepted Answer

Network Security Group (NSG)

Answer

NSGs are stateful packet filters that contain inbound and outbound security rules and can be applied at the subnet level or directly to a network interface.

Question 4

When configuring VNet peering between two virtual networks in different Azure regions, what is this configuration called?

Accepted Answer

Global VNet peering

Answer

VNet peering between virtual networks in different Azure regions is called global VNet peering, and it uses the Microsoft backbone network.

Question 5

A subnet has a route table with a user-defined route pointing 0.0.0.0/0 to an NVA. What happens to traffic destined for an Azure Storage service endpoint configured on the same subnet?

Accepted Answer

Traffic goes directly to Azure Storage via the service endpoint route

Answer

Service endpoint routes have a longer prefix match than 0.0.0.0/0 and take precedence, routing storage traffic directly to the service over the Azure backbone.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Networking Fundamentals 3