What is the primary purpose of Azure Virtual WAN?

To replace the need for Network Security Groups

To provide a dedicated private connection to Azure without using the internet

To monitor network performance and diagnose issues

To provide a unified networking platform that connects branch offices, users, and Azure virtual networks

What is the primary purpose of Azure Firewall?

To filter network traffic between Azure resources and the internet

To encrypt data at rest in Azure SQL Database

To monitor network performance and diagnose issues

To provide a VPN gateway for remote access

You have two VNets in different Azure regions. You need to enable communication between VMs in these VNets. You also need to ensure that traffic between the VNets is filtered by NSGs. What should you do?

Create a global VNet peering between the VNets and apply NSGs to the subnets.

Use a VPN gateway to connect the VNets and apply NSGs to the gateway subnet.

Create a local VNet peering between the VNets and apply NSGs to the subnets.

Use Azure Virtual Network Manager to connect the VNets and apply NSGs.

Users report that they cannot connect to a VM in Azure from the internet. You need to diagnose whether the issue is caused by an NSG rule or by a routing problem. What should you use?

Network Watcher packet capture to capture traffic on the VM's NIC.

Network Watcher connection troubleshoot to test connectivity between the VM and another resource.

Network Watcher IP flow verify to test connectivity from the internet to the VM.

Network Watcher next hop to check the next hop for traffic from the VM to the internet.

What is the primary purpose of Azure Virtual Network Manager?

To centrally manage and configure virtual networks across subscriptions

To create and manage VPN gateways for cross-premises connectivity

To monitor network traffic and diagnose connectivity issues

To provide DDoS protection for all virtual networks

Microsoft Certified:Azure Security Engineer Associate

Domain 2Objective 1

Plan and Implement Security for Virtual Networks AZ-500 Practice Questions (Page 3)

Part of the Secure networking domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

11concepts

20–25%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of Azure Virtual WAN?
Select an answer first
12foundation · easy
What is the primary purpose of Azure Firewall?
Select an answer first
13application · medium
You have two VNets in different Azure regions. You need to enable communication between VMs in these VNets. You also need to ensure that traffic between the VNets is filtered by NSGs. What should you do?
Select an answer first
14application · medium
Users report that they cannot connect to a VM in Azure from the internet. You need to diagnose whether the issue is caused by an NSG rule or by a routing problem. What should you use?
Select an answer first
15foundation · easy
What is the primary purpose of Azure Virtual Network Manager?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.