Azure Networking Flashcards
6 cards from real AZ-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Networking flashcards as text
Which Azure routing feature allows you to override default system routes and direct traffic through a network virtual appliance (NVA)?
Answer: User-Defined Routes (UDR)
User-Defined Routes let you create custom routes in a route table to force traffic through an NVA or override Azure default routing.
What does Azure DDoS Protection Standard provide beyond the Basic tier?
Answer: Adaptive tuning, attack analytics, rapid response support, and cost guarantees
DDoS Protection Standard adds adaptive real-time tuning, detailed attack telemetry, a rapid response team, and cost protection beyond the free Basic tier.
Which Azure service provides a managed, cloud-native firewall with threat intelligence filtering and application FQDN rules?
Answer: Azure Firewall
Azure Firewall is a stateful, managed network security service with built-in high availability, threat intelligence, and FQDN filtering.
What is the role of Azure Bastion in a network architecture?
Answer: Provides secure RDP/SSH to VMs without exposing public IPs
Azure Bastion is a fully managed PaaS service that provides secure RDP and SSH access to VMs directly through the Azure portal, without requiring public IP addresses.
Which BGP attribute does Azure use when advertising routes to an on-premises network over ExpressRoute to influence path selection?
Answer: Community Tags
Azure uses BGP community tags to let customers control route preferences and apply policies for ExpressRoute path selection.
What is the minimum subnet size required for an Azure Application Gateway v2 deployment?
Answer: /26
Azure Application Gateway v2 requires a dedicated subnet with at least a /26 CIDR block to accommodate scaling and management addresses.