AZ-700 Troubleshooting and Performance Optimization 3

Question 1

An Azure Firewall is deployed in a hub VNet. Spoke VMs can reach the internet but not each other through the firewall. What is likely missing?

Accepted Answer

A network rule allowing spoke-to-spoke traffic in Azure Firewall

Answer

Azure Firewall blocks all traffic by default; a network rule explicitly allowing spoke-to-spoke traffic must be added.

Question 2

You are troubleshooting high latency on an ExpressRoute circuit. Azure Monitor shows low utilization. What tool helps identify if the latency is within Microsoft's network or on the provider segment?

Accepted Answer

Network Performance Monitor with ExpressRoute monitoring

Answer

Network Performance Monitor with the ExpressRoute monitoring solution measures latency across each circuit segment including provider and Microsoft network legs.

Question 3

A VM behind an internal Standard Load Balancer cannot initiate outbound connections to the internet. What is the recommended fix?

Accepted Answer

Attach a NAT Gateway to the subnet

Answer

Standard internal Load Balancers do not provide outbound SNAT; a NAT Gateway on the subnet is the recommended solution for outbound connectivity.

Question 4

After enabling Azure DDoS Protection Standard on a VNet, legitimate traffic spikes are being dropped. What should you configure to prevent this?

Accepted Answer

Configure DDoS protection policies with custom thresholds using adaptive tuning

Answer

DDoS Protection Standard uses adaptive tuning to learn normal traffic patterns, but custom threshold policies can be set to accommodate known legitimate traffic patterns.

Question 5

A BGP route learned over a site-to-site VPN takes priority over a static route to the same prefix. You need the static route to always win. What should you do?

Accepted Answer

Disable BGP route propagation on the route table and use only static routes

Answer

Disabling BGP route propagation on the subnet route table prevents dynamically learned BGP routes from overriding manually configured static routes.

(AZ-700) Azure Network Engineer Associate Practice Test

(AZ-700) Azure Network Engineer Associate Practice Test

AZ-700 Troubleshooting and Performance Optimization 3