AZ-300 Azure Networking 1 — Questions and Answers
Question 1: Which Azure service acts as a globally distributed, scalable load balancer that operates at Layer 7 and provides SSL termination and URL-based routing?
- Azure Load Balancer
- Azure Traffic Manager
- Azure Application Gateway
- Azure Front Door (Correct answer)
Correct answer: Azure Front Door
Azure Front Door is a global Layer 7 load balancer with SSL offload, URL routing, and WAF capabilities built in.
Question 2: What is the maximum size of an Azure Virtual Network address space?
- /8 (Correct answer)
- /16
- /24
- /28
Correct answer: /8
Azure Virtual Networks support address spaces from /8 to /29, making /8 the largest possible CIDR block.
Question 3: Which Azure networking feature enables private connectivity between your VNet and Azure PaaS services without traversing the public internet?
- VNet Peering
- Service Endpoints
- Private Link (Correct answer)
- ExpressRoute
Correct answer: Private Link
Azure Private Link creates a private endpoint in your VNet that maps to an Azure PaaS service, keeping all traffic on the Microsoft backbone.
Question 4: What is the purpose of a Network Security Group (NSG) in Azure?
- Encrypts network traffic
- Filters inbound and outbound traffic with allow/deny rules based on 5-tuple (Correct answer)
- Provides DDoS protection
- Routes traffic between subnets
Correct answer: Filters inbound and outbound traffic with allow/deny rules based on 5-tuple
NSGs contain security rules that allow or deny network traffic based on source/destination IP, port, and protocol.
Question 5: Which Azure service provides a dedicated private connection from an on-premises network to Azure, bypassing the public internet entirely?
- Site-to-Site VPN
- Point-to-Site VPN
- ExpressRoute (Correct answer)
- Azure Bastion
Correct answer: ExpressRoute
ExpressRoute provides a dedicated private circuit from your on-premises infrastructure to Azure, offering higher reliability and lower latency than VPN.
Question 6: In Azure, what is VNet Peering used for?
- Connecting VNets in the same subscription only
- Connecting Azure VNets across regions or subscriptions with low-latency private traffic (Correct answer)
- Encrypting traffic between VNets
- Providing internet access to VMs
Correct answer: Connecting Azure VNets across regions or subscriptions with low-latency private traffic
VNet Peering connects Azure Virtual Networks privately across regions (Global VNet Peering) or within the same region using the Microsoft backbone.
AZ-300 Azure Networking 1
Which Azure service acts as a globally distributed, scalable load balancer that operates at Layer 7 and provides SSL termination and URL-based routing?