Azure Networking Flashcards
6 cards from real AZ-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Networking flashcards as text
Which Azure service acts as a globally distributed, scalable load balancer that operates at Layer 7 and provides SSL termination and URL-based routing?
Answer: Azure Front Door
Azure Front Door is a global Layer 7 load balancer with SSL offload, URL routing, and WAF capabilities built in.
What is the maximum size of an Azure Virtual Network address space?
Answer: /8
Azure Virtual Networks support address spaces from /8 to /29, making /8 the largest possible CIDR block.
Which Azure networking feature enables private connectivity between your VNet and Azure PaaS services without traversing the public internet?
Answer: Private Link
Azure Private Link creates a private endpoint in your VNet that maps to an Azure PaaS service, keeping all traffic on the Microsoft backbone.
What is the purpose of a Network Security Group (NSG) in Azure?
Answer: Filters inbound and outbound traffic with allow/deny rules based on 5-tuple
NSGs contain security rules that allow or deny network traffic based on source/destination IP, port, and protocol.
Which Azure service provides a dedicated private connection from an on-premises network to Azure, bypassing the public internet entirely?
Answer: ExpressRoute
ExpressRoute provides a dedicated private circuit from your on-premises infrastructure to Azure, offering higher reliability and lower latency than VPN.
In Azure, what is VNet Peering used for?
Answer: Connecting Azure VNets across regions or subscriptions with low-latency private traffic
VNet Peering connects Azure Virtual Networks privately across regions (Global VNet Peering) or within the same region using the Microsoft backbone.