az-104_module-4

Your organization needs to create isolated network environments within Azure to segment different application tiers securely. What Azure service should you use to accomplish this?

• Azure Firewall

• Azure Virtual Network

• Azure DNS

• Azure Application Gateway

You are designing a multi-tiered application in Azure. You want to ensure that the front-end web servers can communicate with the application servers but not with the database servers. What Azure feature should you use to control this traffic?

• Network Security Group (NSG)

• Azure Firewall

• Azure Virtual Network Peering

• Azure Traffic Manager

Your Azure environment hosts a web application that should only allow incoming traffic on port 443 (HTTPS). What should you use to define this rule?

• Azure Network Watcher

• Azure Traffic Manager

• Network Security Group (NSG)

• Azure Firewall

You want to restrict inbound traffic to a specific subnet in your Azure Virtual Network to only allow SSH (port 22) access from a specific IP address range. What Azure resource should you configure to enforce this rule?

• Azure Virtual Network Peering

• Azure Traffic Manager

• Network Security Group (NSG)

• Azure Firewall

Your organization needs to centralize network security and control outbound internet access for all Azure resources. What Azure service can help you achieve this?

• Azure Virtual Network

• Network Security Group (NSG)

• Azure Firewall

• Azure DNS

You have an Azure Firewall in place to protect your Azure resources. What type of rule should you configure to allow traffic from your on-premises network to Azure resources?

• Inbound rule

• Outbound rule

• Network rule

• Application rule

Your organization is hosting a public-facing website on Azure. Which Azure service allows you to configure custom domain names and map them to your Azure resources?

• Azure Traffic Manager

• Azure Virtual Network

• Azure DNS

• Network Security Group (NSG)

You need to ensure that DNS queries originating from your Azure Virtual Machines can be resolved to both internal and external resources. What should you configure to achieve this?

• Azure Traffic Manager

• Azure DNS

• Network Security Group (NSG)

• Azure Firewall

Your organization is hosting a critical web application on Azure, and you want to ensure high availability and protection from Distributed Denial of Service (DDoS) attacks. Which Azure service should you configure for this purpose?

• Azure Application Gateway

• Azure Traffic Manager

• Azure Firewall

• Azure DDoS Protection

You need to protect your Azure Virtual Network from unauthorized access and provide application-level filtering for outbound and inbound traffic. What Azure service should you deploy to achieve this?

• Azure Load Balancer

• Azure Traffic Manager

• Azure Application Gateway

• Azure Firewall