Microsoft Certified:Azure Security Engineer Associate
Domain 2Objective 1
Plan and Implement Security for Virtual Networks AZ-500 Practice Questions (Page 6)
Part of the Secure networking domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)
35questions here
7free pages
11concepts
20–25%of the exam
Questions 26–30
- 26
Your company is deploying a global network with multiple branch offices and Azure regions. You need to provide optimized routing between branches and Azure, while also enforcing security inspection for all traffic between branches and Azure. You have a limited budget and want to minimize operational overhead. What should you implement?
Select an answer first - 27
You have a hub-and-spoke topology with an Azure Firewall in the hub. You need to route all outbound internet traffic from spoke VMs through the firewall. You have created a route table with a default route to the firewall and associated it with the spoke subnet. However, you notice that some traffic is bypassing the firewall. What is the most likely cause?
Select an answer first - 28
What is the purpose of implementing encryption over ExpressRoute?
Select an answer first - 29
What is the main benefit of using Application Security Groups (ASGs) in Azure?
Select an answer first - 30
Which Network Watcher feature allows you to test whether a specific packet is allowed or denied by network security rules?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.