AZ-700 Networking Services 1 — Questions and Answers
Question 1: Which Azure service would you use to create a private, isolated network within the Azure cloud?
- Azure VPN Gateway
- Azure Virtual Network (VNet) (Correct answer)
- Azure ExpressRoute
- Azure Load Balancer
Correct answer: Azure Virtual Network (VNet)
Azure Virtual Network (VNet) is the fundamental building block for your private network in Azure. It allows you to create an isolated and secure network environment where you can deploy your Azure resources, such as virtual machines and databases. VNets enable private communication between resources, both within the VNet and to on-premises networks.
Question 2: What is the primary purpose of Azure Network Security Groups (NSGs)?
- To manage routing between VNets
- To control inbound and outbound network traffic to Azure resources (Correct answer)
- To distribute traffic across multiple virtual machines
- To monitor network performance and traffic flow
Correct answer: To control inbound and outbound network traffic to Azure resources
Azure Network Security Groups (NSGs) are used to filter network traffic to and from Azure resources within an Azure Virtual Network. They allow you to define rules that permit or deny inbound and outbound traffic based on source/destination IP address, port, and protocol. This provides a crucial layer of security by controlling access to your virtual machines and subnets.
Question 3: Which Azure service provides a dedicated private connection between on-premises networks and Azure datacenters?
- Azure VPN Gateway
- Azure Traffic Manager
- Azure ExpressRoute (Correct answer)
- Azure Application Gateway
Correct answer: Azure ExpressRoute
Azure ExpressRoute provides a dedicated, private connection between your on-premises infrastructure and Azure datacenters. Unlike VPNs, ExpressRoute connections do not go over the public internet, offering higher bandwidth, lower latency, and greater reliability. This makes it ideal for hybrid cloud scenarios requiring consistent network performance.
Question 4: Which Azure service is designed for web application security, providing protection against common web-based attacks?
- Azure DDoS Protection
- Azure Application Gateway with WAF (Web Application Firewall (Correct answer)
- Azure Firewall
- Azure Traffic Manager
Correct answer: Azure Application Gateway with WAF (Web Application Firewall
Azure Application Gateway with Web Application Firewall (WAF) is specifically designed to protect web applications from common web-based attacks. The WAF component inspects incoming web traffic for threats like SQL injection, cross-site scripting, and other OWASP Top 10 vulnerabilities. It acts as a reverse proxy, securing your web applications before traffic reaches your backend servers.
Question 5: What is the function of Azure Load Balancer?
- To distribute incoming network traffic across multiple resources to improve availability (Correct answer)
- To provide encrypted tunnels for secure communication
- To facilitate DNS name resolution for Azure resources
- To prevent Distributed Denial of Service (DDoS) attacks
Correct answer: To distribute incoming network traffic across multiple resources to improve availability
Azure Load Balancer distributes incoming network traffic across multiple backend resources, such as virtual machines or virtual machine scale sets. Its primary function is to improve the availability and scalability of applications by ensuring no single server becomes a bottleneck. By distributing requests, it helps prevent downtime and enhances user experience.
AZ-700 Networking Services 1
Which Azure service would you use to create a private, isolated network within the Azure cloud?