View Full Microsoft AZ-700 Exam Dumps and Practice Test Dumps.

 

Question 1

Which Azure service provides centralized network connectivity and routing management across multiple virtual networks and branch locations?

1. Azure Load Balancer
2. Azure Virtual WAN
3. Azure DNS
4. Azure Application Gateway

Correct Answer: 2
Explanation

Azure Virtual WAN provides a managed networking service that simplifies connectivity between Azure virtual networks, branch offices, remote users, and other network locations. It can use virtual hubs to provide centralized routing and connectivity. Azure Load Balancer distributes network traffic, Azure DNS provides name resolution, and Application Gateway provides application-layer traffic management. Virtual WAN is particularly useful for organizations that need scalable connectivity across many locations. Its architecture can help reduce the complexity of manually managing numerous individual network connections and routing configurations.

Question 2

Which Azure feature allows a private IP address from a virtual network to connect privately to a supported Azure service?

1. Azure Public IP
2. Azure VPN Gateway
3. Azure Load Balancer
4. Azure Private Endpoint

Correct Answer: 4
Explanation

An Azure Private Endpoint assigns a private IP address from a virtual network to a supported Azure resource through Azure Private Link. This allows clients to access the service through private connectivity rather than relying on a publicly exposed endpoint. Private Endpoints are commonly used to secure access to services such as Azure Storage, Azure SQL Database, and other supported resources. VPN Gateway provides network connectivity, Load Balancer distributes traffic, and a public IP provides Internet-facing connectivity. Private Endpoint designs should also consider DNS resolution and access policies.

Question 3

Which Azure networking component is used to control inbound and outbound traffic at the subnet or network interface level?

1. Network Security Group
2. Azure DNS
3. Azure Route Server
4. Azure Traffic Manager

Correct Answer: 1
Explanation

A Network Security Group, or NSG, contains security rules that control inbound and outbound network traffic associated with network interfaces, subnets, or both. Rules can evaluate characteristics such as source, destination, protocol, and port. NSGs provide an important network filtering layer for Azure virtual networks. Azure DNS handles name resolution, Route Server facilitates dynamic routing exchange, and Traffic Manager provides DNS-based traffic distribution. NSG rules should follow least-privilege principles and allow only the traffic required by applications and network dependencies.

Question 4

An organization needs to distribute HTTP and HTTPS requests across multiple backend web servers while using URL-based routing. Which service should be selected?

1. Azure Load Balancer
2. Azure Traffic Manager
3. Azure Application Gateway
4. Azure Virtual WAN

Correct Answer: 3
Explanation

Azure Application Gateway is a Layer 7 load-balancing service designed for web traffic. It can distribute HTTP and HTTPS requests and support routing decisions based on information such as URLs and host names. Azure Load Balancer operates primarily at Layer 4, Traffic Manager uses DNS-based traffic routing, and Virtual WAN provides wide-area networking capabilities. Application Gateway can also integrate with Web Application Firewall capabilities to provide additional protection for web applications. The architecture should account for backend pools, health probes, listeners, routing rules, and TLS configuration.

Question 5

Which Azure service provides DNS-based traffic distribution across globally distributed application endpoints?

1. Azure Firewall
2. Azure Bastion
3. Azure Route Server
4. Azure Traffic Manager

Correct Answer: 4
Explanation

Azure Traffic Manager is a DNS-based traffic routing service that directs clients toward appropriate application endpoints according to configured routing methods. It can support scenarios involving multiple geographic locations, endpoint priorities, performance considerations, or other routing requirements. Azure Firewall provides network security, Bastion provides secure administrative access to virtual machines, and Route Server supports dynamic routing integration. Because Traffic Manager operates through DNS responses, architects should consider DNS caching and client behavior when designing global traffic distribution and failover strategies.

Question 6

Which Azure service provides managed Layer 4 load balancing for TCP and UDP traffic?

1. Azure Application Gateway
2. Azure Load Balancer
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 2
Explanation

Azure Load Balancer provides Layer 4 load balancing for TCP and UDP traffic. It can distribute network traffic across backend resources while using health probes to determine whether endpoints are available. Application Gateway is designed for Layer 7 web traffic, Traffic Manager performs DNS-based routing, and Azure Front Door provides global application delivery and Layer 7 capabilities. Load Balancer can be used for internal or public-facing architectures depending on the selected configuration. Proper frontend, backend pool, health probe, and load-balancing rule design is essential.

Question 7

Which Azure component enables dynamic routing information to be exchanged between network virtual appliances and Azure virtual networks?

1. Azure Route Server
2. Azure DNS Private Resolver
3. Azure Bastion
4. Azure Application Gateway

Correct Answer: 1
Explanation

Azure Route Server provides a managed routing service that allows network virtual appliances to exchange routing information with Azure through the Border Gateway Protocol. This can simplify dynamic routing scenarios where network virtual appliances need to advertise or learn routes. Azure DNS Private Resolver handles DNS queries, Bastion provides secure management access, and Application Gateway manages web traffic. Route Server can reduce the need to manually configure routes when network topologies change. Its design should account for routing relationships, advertised prefixes, and network appliance requirements.

Question 8

Which Azure networking technology allows private connectivity to Azure PaaS services without exposing the service through a public IP address?

1. Azure Traffic Manager
2. Azure Public IP
3. Azure Load Balancer
4. Azure Private Link

Correct Answer: 4
Explanation

Azure Private Link enables private connectivity from a virtual network to supported Azure services and other Private Link resources. Traffic can remain on the Microsoft network rather than requiring access through a public endpoint. Private Link is commonly used when organizations want stronger network isolation for platform services. Traffic Manager provides DNS-based routing, Public IP provides Internet-facing addressing, and Load Balancer distributes network traffic. Private Link architectures should include appropriate DNS configuration, network security rules, access permissions, and service endpoint availability considerations.

Question 9

Which Azure service provides managed DNS hosting for public domain names?

1. Azure Route Server
2. Azure Load Balancer
3. Azure DNS
4. Azure Firewall

Correct Answer: 3
Explanation

Azure DNS provides DNS hosting for domain names and uses Azure infrastructure to manage DNS records. Organizations can create DNS zones and records for public domains and integrate DNS management with Azure-based operations. Route Server focuses on dynamic routing, Load Balancer distributes network traffic, and Azure Firewall provides network security filtering. Azure DNS can also support private DNS through separate Azure capabilities designed for internal name resolution. DNS architecture should consider delegation, record management, TTL values, availability, and administrative control.

Question 10

A company wants to securely connect its on-premises network to an Azure virtual network over the public Internet using an encrypted tunnel. Which service should it use?

1. Azure VPN Gateway
2. Azure Traffic Manager
3. Azure DNS
4. Azure Route Server

Correct Answer: 1
Explanation

Azure VPN Gateway provides encrypted connectivity between Azure virtual networks and other networks by using VPN technologies. A site-to-site VPN can connect an on-premises network to an Azure virtual network through an encrypted tunnel over the Internet. Traffic Manager provides DNS-based routing, Azure DNS provides name resolution, and Route Server supports dynamic routing exchange. VPN Gateway architecture should account for gateway configuration, supported VPN protocols, address spaces, authentication, routing, redundancy, and bandwidth requirements to ensure reliable hybrid connectivity.

Question 11

Which Azure networking service can provide private DNS resolution for resources connected to a virtual network?

1. Azure Traffic Manager
2. Azure Private DNS
3. Azure Load Balancer
4. Azure Firewall

Correct Answer: 2
Explanation

Azure Private DNS provides DNS zones that can be used for name resolution within Azure virtual networks. It is useful when applications need to resolve internal resource names without exposing those DNS records publicly. Private DNS zones can be linked to virtual networks and can support name resolution for private resources. Traffic Manager performs global DNS-based traffic routing, Load Balancer distributes traffic, and Azure Firewall provides security controls. Proper private DNS architecture helps ensure that applications can consistently resolve internal endpoints across connected network environments.

Question 12

Which Azure service is designed to inspect and filter network traffic using centralized firewall policies?

1. Azure DNS
2. Azure Load Balancer
3. Azure Firewall
4. Azure Route Server

Correct Answer: 3
Explanation

Azure Firewall is a managed, stateful network security service that can centrally control and inspect traffic flowing through supported Azure network architectures. It supports network and application-level filtering capabilities and can be managed through centralized policies. Azure DNS handles name resolution, Load Balancer distributes traffic, and Route Server provides dynamic routing capabilities. Azure Firewall can be used to establish controlled traffic flows between network segments, Internet destinations, and other environments. Logging and monitoring should be enabled to support security analysis and policy validation.

Question 13

Which Azure service is designed to provide secure administrative access to virtual machines without requiring direct inbound Internet connectivity to those virtual machines?

1. Azure Traffic Manager
2. Azure Load Balancer
3. Azure DNS
4. Azure Bastion

Correct Answer: 4
Explanation

Azure Bastion provides secure management connectivity to virtual machines through the Azure portal without requiring public IP addresses on the virtual machines for administrative access. This can reduce exposure of management ports such as RDP and SSH to the public Internet. Traffic Manager handles DNS-based traffic routing, Load Balancer distributes network traffic, and Azure DNS provides name resolution. Bastion should be incorporated into a broader administrative security design that includes strong identity controls, least privilege, monitoring, network segmentation, and appropriate management access policies.

Question 14

Which networking feature allows an organization to create a private network path between an Azure virtual network and a supported Azure service?

1. Service endpoint
2. Public IP address
3. Internet gateway
4. Public DNS zone

Correct Answer: 1
Explanation

Azure service endpoints extend a virtual network’s identity to supported Azure services and allow traffic to those services to use an optimized route through the Azure backbone. They can help secure supported services by allowing access to be restricted to selected virtual networks. A public IP address and public DNS zone support public-facing connectivity, while an Internet gateway is not an Azure networking feature used for this purpose. Service endpoints differ from Private Endpoints because they do not place a private IP address for the service inside the virtual network.

Question 15

Which Azure service provides global Layer 7 application delivery with capabilities such as HTTP routing and edge acceleration?

1. Azure Load Balancer
2. Azure VPN Gateway
3. Azure Front Door
4. Azure Route Server

Correct Answer: 3
Explanation

Azure Front Door is a global application delivery service that operates at the HTTP and HTTPS application layer. It can provide global routing, application acceleration, health-based traffic distribution, and integration with web application protection capabilities. Azure Load Balancer provides Layer 4 load balancing, VPN Gateway provides encrypted network connectivity, and Route Server supports dynamic routing. Front Door is useful for applications that need global entry points and intelligent routing between origins. Its configuration should consider domains, origins, routing rules, caching requirements, TLS, and security policies.

Question 16

Which routing method sends traffic through a specific network virtual appliance by using a user-defined route?

1. System route
2. User-defined route
3. DNS route
4. Service endpoint route

Correct Answer: 2
Explanation

A user-defined route, or UDR, allows administrators to define custom routing behavior for traffic in an Azure virtual network. A common use is directing traffic through a network virtual appliance for inspection, filtering, or other network functions. System routes are automatically created by Azure, while DNS mechanisms resolve names rather than determine IP packet forwarding. Service endpoints provide optimized connectivity to supported Azure services. UDR designs should be carefully evaluated because incorrect next-hop settings or overlapping routes can disrupt application connectivity and network security inspection.

Question 17

Which Azure architecture is commonly used to provide centralized network services while connecting multiple spoke virtual networks?

1. Point-to-point only
2. Flat public network
3. Single subnet design
4. Hub-and-spoke topology

Correct Answer: 4
Explanation

A hub-and-spoke topology uses a central hub virtual network for shared network services while connecting multiple spoke virtual networks for individual workloads. The hub can host services such as Azure Firewall, VPN Gateway, Bastion, or other shared components, while spokes can isolate workloads according to business or security requirements. This design can simplify centralized traffic inspection and connectivity management. Routing and access rules must be carefully configured so that spokes communicate only when required. The topology should also account for scalability, redundancy, and operational ownership.

Question 18

Which Azure service provides a managed DNS forwarding capability for resolving DNS queries between Azure and on-premises environments?

1. Azure Load Balancer
2. Azure Front Door
3. Azure DNS Private Resolver
4. Azure Traffic Manager

Correct Answer: 3
Explanation

Azure DNS Private Resolver provides managed DNS resolution capabilities for hybrid environments. It can provide inbound and outbound DNS endpoints that allow Azure resources and on-premises networks to resolve names across environments without requiring customers to maintain DNS forwarding infrastructure on virtual machines. Load Balancer manages network traffic, Front Door provides global application delivery, and Traffic Manager provides DNS-based traffic routing. A well-designed hybrid DNS architecture should define forwarding rules, resolver endpoints, network connectivity, name-resolution dependencies, and security controls.

Question 19

An application requires traffic to be distributed across healthy backend instances while maintaining a static frontend IP address. Which Azure service is appropriate?

1. Azure Traffic Manager
2. Azure Load Balancer
3. Azure DNS
4. Azure Route Server

Correct Answer: 2
Explanation

Azure Load Balancer can distribute network traffic across healthy backend instances and can provide frontend IP configurations for applications requiring predictable addressing. Health probes help determine which backend instances are available to receive traffic. Traffic Manager uses DNS-based routing rather than directly distributing individual network connections, Azure DNS provides name resolution, and Route Server handles dynamic routing exchange. When designing a load-balanced service, architects should consider frontend configuration, backend pools, health probes, ports, protocols, session requirements, and availability objectives.

Question 20

Which design principle should guide the selection of Azure networking services for a new enterprise workload?

1. Choose services based on traffic, security, connectivity, and business requirements
2. Use every available networking service
3. Expose all resources through public IP addresses
4. Avoid network segmentation to simplify administration

Correct Answer: 1
Explanation

Azure networking services should be selected according to the workload’s actual requirements, including traffic patterns, security boundaries, connectivity needs, availability objectives, performance expectations, and operational constraints. Using unnecessary services can increase complexity, while exposing resources publicly can expand the attack surface. Avoiding segmentation can also weaken security boundaries. A sound network architecture begins by understanding business and technical requirements, then selecting appropriate services such as Load Balancer, Application Gateway, Firewall, Private Link, VPN Gateway, or other networking capabilities where justified. This approach keeps the architecture secure, scalable, and manageable.