AZ-900 Azure Compute and Networking 3 — Questions and Answers
Question 1: Which Azure service distributes incoming network traffic across multiple backend VMs at layer 4 (transport)?
- Azure Load Balancer (Correct answer)
- Azure Application Gateway
- Azure Traffic Manager
- Azure Firewall
Correct answer: Azure Load Balancer
Azure Load Balancer operates at layer 4 and distributes TCP/UDP traffic across backend pool resources.
Question 2: What does Azure Application Gateway provide that a basic load balancer does not?
- Layer 7 web traffic routing with a web application firewall (Correct answer)
- Free virtual machines
- Global DNS resolution
- Physical datacenter hosting
Correct answer: Layer 7 web traffic routing with a web application firewall
Application Gateway is a layer 7 load balancer that supports URL-based routing and includes an optional web application firewall.
Question 3: Which service routes user traffic to the closest or best-performing endpoint at the DNS level across regions?
- Azure Traffic Manager (Correct answer)
- Azure Load Balancer
- Azure Bastion
- Azure Virtual Network
Correct answer: Azure Traffic Manager
Azure Traffic Manager is a DNS-based traffic load balancer that directs clients to the optimal global endpoint.
Question 4: What is the main function of an Azure virtual network (VNet)?
- Enabling secure communication between Azure resources (Correct answer)
- Storing large amounts of unstructured data
- Running serverless functions
- Managing user identities
Correct answer: Enabling secure communication between Azure resources
A virtual network enables Azure resources to securely communicate with each other, the internet, and on-premises networks.
Question 5: Which option lets you connect two Azure virtual networks so resources communicate privately as if on the same network?
- VNet peering (Correct answer)
- Network Security Group
- Azure DNS zone
- Availability set
Correct answer: VNet peering
VNet peering connects two virtual networks, allowing traffic to route between them through the Microsoft backbone privately.
Question 6: A developer needs to run thousands of parallel batch jobs without managing a scheduler. Which service fits best?
- Azure Batch (Correct answer)
- Azure App Service
- Azure Bastion
- Azure DNS
Correct answer: Azure Batch
Azure Batch schedules and runs large-scale parallel and high-performance computing jobs efficiently.
Question 7: What does Azure Bastion provide?
- Secure RDP and SSH access to VMs without public IPs (Correct answer)
- Automatic VM scaling
- Global content delivery
- Managed database hosting
Correct answer: Secure RDP and SSH access to VMs without public IPs
Azure Bastion provides secure RDP/SSH connectivity to VMs directly through the portal without exposing public IP addresses.
AZ-900 Azure Compute and Networking 3
Which Azure service distributes incoming network traffic across multiple backend VMs at layer 4 (transport)?