AZ-500 Security Quiz

What is the primary purpose of a Network Security Group (NSG) in Azure Virtual Networks?

• To encrypt traffic between virtual machines

• To monitor application performance

• To filter inbound and outbound traffic

• To configure VPN gateway routing

Which Azure feature allows you to segment a virtual network into smaller address spaces for better isolation?

• Application Gateway

• Subnetting

• Route Table

• ExpressRoute

You want to inspect and control traffic between Azure subnets. Which tool is most appropriate?

• Azure Traffic Manager

• Azure Firewall

• Azure Monitor

• Application Gateway

Which Azure service allows logging of traffic flow information in an NSG?

• Azure Bastion

• Azure Monitor

• NSG Flow Logs

• Log Analytics Workspace

What is the default behaviour of NSG rules if no custom rules are configured?

• Deny all inbound and allow all outbound

• Allow all inbound and deny all outbound

• Allow all traffic

• Deny all traffic

You need to secure traffic between two VMs on different VNets. Which feature should you configure?

• Virtual Network Peering with NSG rules

• Application Gateway

• ExpressRoute

• Azure Front Door

Which of the following is used to define routes for network traffic in Azure virtual networks?

• Service Tags

• NSG

• Route Tables (UDR)

• Azure Monitor

What is the function of Azure DDoS Protection Standard?

• Protects storage accounts

• Encrypts VM data

• Mitigates DDoS attacks

• Creates secure tunnels

Which of the following should be used to allow access to a VM without exposing it to the public internet?

• Public IP

• Azure Bastion

• VPN Gateway

• NSG

What is the benefit of using Service Tags in NSG rules?

• Tagging VMs for billing

• Automatically allow service traffic without IP management

• Tagging services for access control

• Encrypting service communication