Free AZ-700 Network Security Questions and Answers

Question 1

What is the purpose of a Network Security Group (NSG) in Azure?

Accepted Answer

To filter network traffic to and from Azure resources

Answer

A Network Security Group (NSG) acts as a virtual firewall for Azure resources, allowing or denying inbound and outbound network traffic based on defined rules. NSGs provide a fundamental layer of security by controlling access to VMs, subnets, and other network interfaces. They help protect resources from unauthorized access and malicious traffic.

Question 2

Which Azure service provides protection against Distributed Denial of Service (DDoS) attacks?

Accepted Answer

Azure DDoS Protection

Answer

Azure DDoS Protection is a dedicated service designed to safeguard Azure resources from Distributed Denial of Service (DDoS) attacks. It provides always-on traffic monitoring and automatic mitigation capabilities to protect applications and services from volumetric, protocol, and resource-layer attacks. This ensures the availability and performance of your Azure-hosted applications.

Question 3

In Azure, what is the main function of a VPN Gateway?

Accepted Answer

To establish secure connections between on-premises networks and Azure VNets

Answer

An Azure VPN Gateway is used to create secure, encrypted connections between an on-premises network and an Azure Virtual Network (VNet) over the public internet. This enables hybrid cloud scenarios, allowing resources in Azure to communicate securely with resources in your datacenter. It's essential for extending your corporate network into Azure.

Question 4

What is the role of Azure Bastion in network security?

Accepted Answer

To provide a secure, managed connection to virtual machines (VMs) without a public IP

Answer

Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP/SSH connectivity to your virtual machines directly through the Azure portal over SSL. It eliminates the need for public IP addresses on your VMs, significantly enhancing security by preventing direct exposure to the internet and reducing the attack surface.

Question 5

Which Azure feature allows you to isolate and protect applications running in a virtual network?

Accepted Answer

Azure Application Gateway with Web Application Firewall (WAF)

Answer

Azure Application Gateway, especially when configured with its Web Application Firewall (WAF) capability, provides robust protection and isolation for web applications. The WAF filters malicious web traffic and protects against common web vulnerabilities like SQL injection and cross-site scripting. This ensures applications running in a virtual network are shielded from external threats.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test

Free AZ-700 Network Security Questions and Answers