AZ-700 Networking Services 3

Question 1

Which Azure networking service acts as a global HTTP/S load balancer with WAF, SSL offloading, and URL-based routing at the application layer?

Accepted Answer

Azure Front Door

Answer

Azure Front Door is Microsoft's globally distributed CDN and load balancing service that operates at Layer 7 with WAF, SSL offloading, and path-based routing.

Question 2

A network engineer needs to inspect and filter traffic between Azure virtual networks and on-premises networks. Which service provides centralized network security policy management with threat intelligence?

Accepted Answer

Azure Firewall Premium

Answer

Azure Firewall Premium includes IDPS, TLS inspection, URL filtering, and web categories—making it suitable for inspecting traffic with threat intelligence.

Question 3

What is the purpose of the Azure Virtual Network NAT service?

Accepted Answer

Provides outbound-only internet connectivity for subnet resources using static public IPs

Answer

Virtual Network NAT (NAT Gateway) provides outbound-only internet connectivity, allowing resources in a subnet to share one or more static public IP addresses.

Question 4

In Azure, what does the term 'Service Endpoint' accomplish for a storage account?

Accepted Answer

Extends VNet identity to the service over the Azure backbone while keeping traffic off the public internet

Answer

Service endpoints extend VNet private address space and identity to Azure services over the Azure backbone network, removing public internet traversal.

Question 5

Which BGP community value is used to identify routes learned from an Azure Virtual Network when advertising to on-premises via ExpressRoute?

Accepted Answer

12076:5010

Answer

BGP community 12076:5010 is used to tag routes associated with Azure Virtual Networks advertised over ExpressRoute.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Networking Services 3