Azure Network Security Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Network Security flashcards as text
Which Azure WAF mode actively blocks requests that match malicious rules rather than just logging them?
Answer: Prevention mode
WAF Prevention mode blocks matching requests with a 403 response, while Detection mode only logs the match without blocking.
Which Azure Network Watcher feature captures network packets to and from VMs for diagnostics and forensic analysis?
Answer: Packet Capture
Network Watcher Packet Capture records raw packets flowing to and from a VM, useful for troubleshooting and security investigations.
Which service provides centralized security policy and route management for multiple Azure Firewalls across regions and subscriptions?
Answer: Azure Firewall Manager
Azure Firewall Manager centralizes policy authoring and firewall deployment management across hub-and-spoke topologies.
Which Azure feature captures source and destination IP, port, protocol, and allow/deny decision for traffic through an NSG?
Answer: NSG Flow Logs
NSG Flow Logs record every flow decision made by the NSG and store the data in Azure Storage for analysis.
Which combination provides global edge protection against OWASP Top 10 vulnerabilities for geographically distributed web applications?
Answer: Azure Front Door with WAF policy
Azure Front Door combined with a WAF policy provides globally distributed inspection and blocking at the edge closest to users.
What is the primary security benefit of using VNet service endpoints for Azure PaaS services?
Answer: Extend VNet identity to PaaS services so access can be restricted to specific VNets
Service Endpoints allow PaaS service firewalls to recognize and allow traffic specifically from designated VNets while blocking others.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026