Microsoft Azure Security Engineer Certification Azure Network Security

Question 1

Which Azure service provides a managed, stateful, cloud-native firewall with built-in high availability and unrestricted cloud scalability?

Accepted Answer

Azure Firewall

Answer

Network Security Group

Answer

Application Gateway

Answer

Azure Front Door

Question 2

Which Azure service provides browser-based RDP and SSH access to VMs through the Azure portal without requiring public IP addresses on the VMs?

Accepted Answer

Azure Bastion

Answer

Azure VPN Gateway

Answer

Just-in-Time VM Access

Answer

Azure Firewall DNAT rules

Question 3

Which Azure DDoS Protection tier provides adaptive tuning, attack analytics, and SLA guarantees beyond the free platform protection?

Accepted Answer

DDoS Network Protection

Answer

DDoS Basic

Answer

Application Gateway WAF tier

Answer

Azure Firewall Premium

Question 4

What is an Application Security Group (ASG) in Azure primarily used for?

Accepted Answer

Grouping VMs logically so NSG rules can reference the group instead of IPs

Answer

Grouping VNets into peering sets

Answer

Defining Azure Firewall rule collections

Answer

Managing WAF policy associations

Question 5

Which Azure feature assigns a private IP address from your VNet directly to a PaaS service, eliminating exposure over the public internet?

Accepted Answer

Private Endpoints

Answer

Service Endpoints

Answer

VNet Integration

Answer

Azure Relay

Question 6

Which Azure Firewall rule collection type filters HTTP and HTTPS outbound traffic based on fully qualified domain names?

Accepted Answer

Application rules

Answer

Network rules

Answer

NAT rules

Answer

IP Group rules