Practice Test GeeksAZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test
← All AZ-305 Flashcard Decks

Azure Networking Architecture Design Flashcards

6 cards from real AZ-305 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Azure Networking Architecture Design flashcards as text

  1. Your web application is hosted in Azure and needs to be protected against OWASP top-10 web vulnerabilities at the network edge. Which service should you enable?

    Answer: Azure Web Application Firewall (WAF)

    Azure WAF, deployable on Application Gateway or Front Door, inspects HTTP/S traffic against OWASP rule sets to block common web attacks.

  2. You are designing a solution where Azure VMs need outbound internet access but must not have public IP addresses. Which managed service provides this?

    Answer: Azure NAT Gateway

    Azure NAT Gateway provides outbound internet connectivity for VMs in a subnet without requiring public IPs on each VM.

  3. A company needs secure remote access to Azure VMs without exposing RDP/SSH ports to the internet. Which Azure service should you design for this?

    Answer: Azure Bastion

    Azure Bastion provides browser-based RDP/SSH connectivity to VMs over TLS 443 without requiring public IPs or open inbound ports on NSGs.

  4. Which Azure Load Balancer SKU is required to support cross-zone load balancing, global load balancing, and availability zones?

    Answer: Standard SKU

    Azure Load Balancer Standard SKU supports availability zones, cross-zone load balancing, and HTTPS health probes that the Basic SKU does not.

  5. You need to design DNS resolution so that VMs in multiple VNets can resolve the private DNS names of resources in any of those VNets. Which service should you use?

    Answer: Azure Private DNS zones with VNet links

    Azure Private DNS zones linked to multiple VNets allow resources in all linked VNets to resolve each other's DNS names without custom DNS servers.

  6. An application requires an ExpressRoute connection with 99.99% availability SLA. What design achieves this?

    Answer: ExpressRoute circuit with a backup Site-to-Site VPN

    Dual ExpressRoute circuits from geographically diverse peering locations with a zone-redundant gateway delivers the 99.99% SLA Microsoft guarantees for that design.