Microsoft Certified:Azure Security Engineer Associate
Domain 2Objective 1
Plan and Implement Security for Virtual Networks AZ-500 Practice Questions (Page 5)
Part of the Secure networking domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
11concepts
20–25%of the exam
Questions 21–25
- 21
You have a site-to-site VPN connection between your on-premises network and Azure. You need to ensure that traffic from on-premises to Azure is encrypted and that the VPN tunnel is resilient to a single on-premises VPN device failure. You also want to avoid downtime during maintenance. What should you implement?
Select an answer first - 22
What is the purpose of a User-Defined Route (UDR) in Azure?
Select an answer first - 23
Your company has multiple branch offices that need to connect to Azure and to each other. You need to minimize latency and cost while ensuring that all traffic is inspected by a central security solution. You also want to avoid managing multiple VPN gateways. What should you implement?
Select an answer first - 24
What is the primary purpose of Azure Network Watcher?
Select an answer first - 25
Which protocol is commonly used to encrypt traffic over an ExpressRoute connection?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.