A company is centralizing DNS and NTP services in a single region. They need to ensure these services remain available even if one availability zone fails. What is the most cost-effective design that meets this requirement?

Use Azure DNS and Azure NTP built-in services without any custom VMs.

Deploy four VMs for each service across two regions.

Deploy two VMs for each service in different availability zones behind a load balancer.

Deploy a single VM for each service in one availability zone.

A company is centralizing network services in a hub VNet. They want to ensure that all traffic between spokes and the internet passes through a centralized firewall, and that DNS queries from spokes are also centrally inspected. What should they configure?

Use NSGs on each spoke subnet to filter traffic and rely on Azure DNS for resolution.

Deploy separate NVAs in each spoke for firewall and DNS.

Deploy Azure Firewall in the hub and configure UDRs on spoke subnets to route all traffic through it, and use Azure Firewall as DNS proxy.

Use Azure Application Gateway with WAF in the hub for all traffic.

A company is centralizing firewall services in a hub VNet. They have a mix of east-west traffic between spokes and north-south traffic to the internet. They need high availability and the ability to scale with increasing traffic. They also want to minimize operational overhead. Which solution is best?

Deploy a pair of third-party NVAs in an active-passive configuration with a load balancer.

Use Azure Firewall with multiple instances in an availability zone and enable auto-scaling.

Use NSGs on all subnets to filter traffic.

Deploy a single NVA in the hub and route all traffic through it.

A company is migrating its on-premises DNS servers to Azure. They want to minimize downtime and test the new DNS service before fully cutting over. What migration strategy should they use?

Shut down on-premises DNS servers and immediately deploy new DNS VMs in Azure.

Use Azure Traffic Manager to load balance between on-premises and Azure DNS.

Deploy new DNS VMs in Azure, replicate zones, test resolution, then update DHCP/DNS settings to point to the new servers.

Keep on-premises DNS as is and only use Azure DNS for new VMs.

GIAC Cloud Security Architecture and Design

Domain 2Objective 1

Centralizing Shared Network Services GCAD Practice Questions (Page 4)

Part of the Network Architecture and Security domain, which makes up ~24% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~12–19 in this domain), expect 3–5 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

45questions here

9free pages

12concepts

Questions 16–20

16application · medium
A company is centralizing DNS and NTP services in a single region. They need to ensure these services remain available even if one availability zone fails. What is the most cost-effective design that meets this requirement?
Select an answer first
17application · medium
A company is centralizing network services in a hub VNet. They want to ensure that all traffic between spokes and the internet passes through a centralized firewall, and that DNS queries from spokes are also centrally inspected. What should they configure?
Select an answer first
18foundation · easy
Which of the following is a common technology used to centralize authentication for network access?
Select an answer first
19expert · hard
A company is centralizing firewall services in a hub VNet. They have a mix of east-west traffic between spokes and north-south traffic to the internet. They need high availability and the ability to scale with increasing traffic. They also want to minimize operational overhead. Which solution is best?
Select an answer first
20application · medium
A company is migrating its on-premises DNS servers to Azure. They want to minimize downtime and test the new DNS service before fully cutting over. What migration strategy should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.

Centralizing Shared Network Services GCAD Practice Questions (Page 4)

Questions 16–20

A company is centralizing DNS and NTP services in a single region. They need to ensure these services remain available even if one availability zone fails. What is the most cost-effective design that meets this requirement?

A company is centralizing network services in a hub VNet. They want to ensure that all traffic between spokes and the internet passes through a centralized firewall, and that DNS queries from spokes are also centrally inspected. What should they configure?

Which of the following is a common technology used to centralize authentication for network access?

A company is migrating its on-premises DNS servers to Azure. They want to minimize downtime and test the new DNS service before fully cutting over. What migration strategy should they use?

Keep studying — Network Architecture and Security