AZ-700 Networking Services 5

Question 1

A network architect needs to provide DDoS protection for a virtual network with advanced mitigation, telemetry, and cost protection. Which Azure DDoS Protection plan should they deploy?

Accepted Answer

DDoS Network Protection

Answer

DDoS Network Protection provides adaptive tuning, attack analytics, rapid response support, and cost protection guarantees for the entire VNet.

Question 2

Which type of Azure Private Endpoint connection approval is required when the Private Endpoint and the target resource are in different Azure AD tenants?

Accepted Answer

Manual approval

Answer

When a Private Endpoint and target resource are in different Azure AD tenants, the resource owner must manually approve the connection request.

Question 3

What happens to existing TCP connections through an Azure Load Balancer when a backend VM becomes unhealthy according to health probes?

Accepted Answer

Existing connections persist until they time out or are closed; new connections go to healthy backends

Answer

Azure Load Balancer drains unhealthy backends — existing established connections continue until they close naturally, while new connections are only sent to healthy backends.

Question 4

An engineer configures a VNet with address space 10.1.0.0/16. Azure reserves 5 IP addresses in every subnet. In a /24 subnet, how many usable host IPs are available?

Accepted Answer

251

Answer

Azure reserves 5 IPs per subnet (network address, gateway, two DNS, broadcast), so a /24 (256 addresses) yields 256 - 5 = 251 usable host IPs.

Question 5

Which connectivity option in Azure provides a private, dedicated connection from an on-premises network to Azure with bandwidth options up to 100 Gbps?

Accepted Answer

ExpressRoute

Answer

ExpressRoute provides a private, dedicated connection through a connectivity provider with bandwidth up to 100 Gbps and does not traverse the public internet.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Networking Services 5