Azure Network Infrastructure Design Flashcards

Which Azure networking service provides private connectivity from an on-premises network to Azure services over a dedicated private connection, bypassing the public internet?

Answer: Azure ExpressRoute

ExpressRoute creates dedicated private connections between on-premises infrastructure and Azure data centers through a connectivity provider, offering predictable latency and higher security than VPN.

An architect needs to design a hub-and-spoke network topology in Azure. What is the primary benefit of this design?

Answer: It centralizes shared services and network appliances in the hub VNet

Hub-and-spoke topology centralizes shared resources like firewalls, DNS, and VPN gateways in the hub VNet, reducing cost and management overhead across multiple spoke VNets.

Which Azure service allows you to deploy a managed network virtual appliance to inspect and filter all traffic between VNets and on-premises networks?

Answer: Azure Firewall

Azure Firewall is a managed, cloud-native network security service that provides threat intelligence-based filtering and FQDN-based application rules across VNet traffic.

You need to expose a multi-tier web application to the internet with SSL termination and Web Application Firewall (WAF) capabilities. Which Azure service should you use?

Answer: Azure Application Gateway with WAF

Azure Application Gateway with WAF provides Layer 7 load balancing, SSL/TLS termination, and OWASP-based web application firewall protection for web applications.

Which Azure Private DNS Zone feature allows VMs in a VNet to automatically register their DNS records without manual configuration?

Answer: Auto-registration

Auto-registration in Azure Private DNS Zones automatically creates and removes DNS A records when VMs in a linked VNet are created or deleted.

An organization needs to route traffic globally to the nearest healthy endpoint with failover capability using DNS-based routing. Which Azure service should be used?

Answer: Azure Traffic Manager

Azure Traffic Manager uses DNS-based routing policies (performance, geographic, priority, weighted) to direct clients to the nearest or healthiest endpoint globally.