AZ-800 AZ-800 - Microsoft Azure Networking Solutions Azure Bastion and DDoS Protection Questions and Answers 2

Question 1

What are the two tiers of Azure DDoS Protection?

Accepted Answer

DDoS Network Protection and DDoS IP Protection

Answer

DDoS Basic and DDoS Advanced

Answer

DDoS Standard and DDoS Premium

Answer

DDoS Free and DDoS Enterprise

Question 2

Which DDoS Protection tier is automatically applied to all Azure public IP addresses at no extra cost?

Accepted Answer

Default (infrastructure-level) DDoS protection

Answer

DDoS IP Protection

Answer

DDoS Network Protection

Answer

DDoS Basic (legacy)

Question 3

Azure DDoS Network Protection uses adaptive tuning. What does this mean?

Accepted Answer

It learns the normal traffic baseline for each protected IP and adjusts mitigation thresholds accordingly

Answer

It applies the same fixed thresholds to all protected resources

Answer

It requires manual threshold configuration per resource

Answer

It only activates when traffic exceeds 1 Gbps

Question 4

Which Azure service can you combine with DDoS Network Protection to get application-layer (Layer 7) DDoS mitigation?

Accepted Answer

Azure Application Gateway with WAF

Answer

Azure Load Balancer

Answer

Azure VPN Gateway

Answer

Azure Firewall Basic

Question 5

What telemetry does Azure DDoS Network Protection expose during an active attack?

Accepted Answer

Real-time metrics in Azure Monitor including inbound packets dropped and attack vectors

Answer

Only email alerts after the attack is mitigated

Answer

Logs stored only in the DDoS dashboard with no streaming

Answer

Packet captures stored in Azure Blob Storage automatically

Question 6

A company wants to be reimbursed for Azure compute and bandwidth costs incurred due to a DDoS attack. What must they have enabled?

Accepted Answer

DDoS Network Protection plan on the affected VNet

Answer

DDoS IP Protection on each public IP

Answer

Azure Defender for Network

Answer

Azure Front Door with WAF