Free AZ-700 Network Security Questions and Answers — Questions and Answers
Question 1: What is the purpose of a Network Security Group (NSG) in Azure?
- To create virtual networks
- To manage user access to Azure resources
- To filter network traffic to and from Azure resources (Correct answer)
- To encrypt data at rest
Correct answer: To filter network traffic to and from Azure resources
A Network Security Group (NSG) acts as a virtual firewall for Azure resources, allowing or denying inbound and outbound network traffic based on defined rules. NSGs provide a fundamental layer of security by controlling access to VMs, subnets, and other network interfaces. They help protect resources from unauthorized access and malicious traffic.
Question 2: Which Azure service provides protection against Distributed Denial of Service (DDoS) attacks?
- Azure Firewall
- Azure DDoS Protection (Correct answer)
- Azure Security Center
- Azure Key Vault
Correct answer: Azure DDoS Protection
Azure DDoS Protection is a dedicated service designed to safeguard Azure resources from Distributed Denial of Service (DDoS) attacks. It provides always-on traffic monitoring and automatic mitigation capabilities to protect applications and services from volumetric, protocol, and resource-layer attacks. This ensures the availability and performance of your Azure-hosted applications.
Question 3: In Azure, what is the main function of a VPN Gateway?
- To encrypt data at rest
- To filter inbound traffic
- To establish secure connections between on-premises networks and Azure VNets (Correct answer)
- To manage user authentication
Correct answer: To establish secure connections between on-premises networks and Azure VNets
An Azure VPN Gateway is used to create secure, encrypted connections between an on-premises network and an Azure Virtual Network (VNet) over the public internet. This enables hybrid cloud scenarios, allowing resources in Azure to communicate securely with resources in your datacenter. It's essential for extending your corporate network into Azure.
Question 4: What is the role of Azure Bastion in network security?
- To provide a secure, managed connection to virtual machines (VMs) without a public IP (Correct answer)
- To manage network routing
- To monitor network traffic
- To provide VPN services
Correct answer: To provide a secure, managed connection to virtual machines (VMs) without a public IP
Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP/SSH connectivity to your virtual machines directly through the Azure portal over SSL. It eliminates the need for public IP addresses on your VMs, significantly enhancing security by preventing direct exposure to the internet and reducing the attack surface.
Question 5: Which Azure feature allows you to isolate and protect applications running in a virtual network?
- Azure Monitor
- Azure Traffic Manager
- Azure Application Gateway with Web Application Firewall (WAF) (Correct answer)
- Azure Load Balancer
Correct answer: Azure Application Gateway with Web Application Firewall (WAF)
Azure Application Gateway, especially when configured with its Web Application Firewall (WAF) capability, provides robust protection and isolation for web applications. The WAF filters malicious web traffic and protects against common web vulnerabilities like SQL injection and cross-site scripting. This ensures applications running in a virtual network are shielded from external threats.
Free AZ-700 Network Security Questions and Answers
What is the purpose of a Network Security Group (NSG) in Azure?