02 AZ-500: Implement Platform Protection

Which of the following features of Azure networking enables the redirect of Internet traffic back to the company's on-premises servers for packet inspection?

• User Defined Routes
• Cross-premises network connectivity
• Traffic Manager

When configuring Azure Firewall, the organization needs to allow Windows Update network traffic through the firewall. Which of the following rules should be configured?

• Application rules
• Destination inbound rules
• NAT rules

An organization would like to limit outbound Internet traffic from a subnet, which product should be installed and configured?

• Azure Firewall
• Load Balancer
• Azure Web Application Firewall

An organization has a web application and is concerned about attacks that flood the network layer with a substantial amount of seemingly legitimate traffic, how can this type of attack be blocked?

• Create a DDoS policy
• Add an Azure Firewall
• Add a Web Application Firewall

When deploying the Azure Application Gateway and there's a need to ensure incoming requests are checked for common security threats like cross-site scripting and crawlers; how can this concern be addressed?

• Install the Web Application Firewall
• Install Azure Firewall
• Install a load balancer

Which services below are features of Azure Application Gateway?

• Layer 7 load balancing
• Vulnerability assessments
• Authentication

A company is configuring a Network Security Group. To configure the group to allow traffic from public sources, what rule needs to be added to the default rules?

• Allow Internet inbound
• Allow Azure load balancer inbound
• Allow all virtual networks inbound and outbound

An organization has web servers in different regions and this organization wants to optimize the availability of the servers. Which of the network security is best suited for this purpose?

• Azure Front Door
• Azure Application Gateway
• Custom routing

An organization has a security policy that prohibits exposing SSH ports to the outside world. You need to connect to an Azure Linux virtual machine to install software. What should you do?

• Configure the Bastion service
• Configure a Guest configuration on the virtual machine
• Create a custom script extension

What type of disk encryption is used for Linux disks?

• DM-Crypt
• FileVault
• BitLocker