A company uses Azure Firewall Premium with Firewall Policy. They need to block traffic to a list of known malicious IP addresses and also block traffic to a set of malicious FQDNs. They want to manage these lists centrally and reuse them across multiple firewalls. What should you use?

Use Azure Firewall Manager to create a custom threat intelligence feed for both IPs and FQDNs.

Create IP Groups for the IP addresses and URL groups for the FQDNs, then reference them in the firewall policy.

Use Network rules with FQDN tags for the malicious FQDNs and IP Groups for the IP addresses.

Create the IP addresses and FQDNs as individual rules in each firewall's classic rules.

An organization needs to allow inbound HTTPS traffic from the internet to a specific VM behind Azure Firewall. They also need to translate the public IP to the VM's private IP. What should they configure?

An application rule on the firewall

A VPN gateway in front of the firewall

An organization uses Azure Firewall Manager to manage firewalls in multiple Azure regions. The security team wants to enforce a common baseline policy across all firewalls, but each region's firewall must also allow region-specific application rules. What is the most efficient way to configure this?

Create a single Firewall Policy and assign it to all firewalls, then add region-specific rules to the same policy.

Create a parent Firewall Policy with the baseline rules, and create child policies for each region that inherit from the parent and add region-specific rules.

Use Azure Policy to assign the same rules to all firewalls and then use firewall classic rules for region-specific rules.

Create a separate Firewall Policy for each region and manually copy the baseline rules into each.

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 2

Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 1)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

15–20%of the exam

Questions 1–5

1foundation · easy
When using Azure Firewall Manager, which resource is used to define a set of firewall rules that can be applied to multiple firewalls?
Select an answer first
2application · medium
A company uses Azure Firewall Premium with Firewall Policy. They need to block traffic to a list of known malicious IP addresses and also block traffic to a set of malicious FQDNs. They want to manage these lists centrally and reuse them across multiple firewalls. What should you use?
Select an answer first
3application · medium
An organization needs to allow inbound HTTPS traffic from the internet to a specific VM behind Azure Firewall. They also need to translate the public IP to the VM's private IP. What should they configure?
Select an answer first
4application · medium
An organization uses Azure Firewall Manager to manage firewalls in multiple Azure regions. The security team wants to enforce a common baseline policy across all firewalls, but each region's firewall must also allow region-specific application rules. What is the most efficient way to configure this?
Select an answer first
5foundation · easy
A company wants to centralize network security management for multiple Azure Firewalls across different regions. Which Azure service should they use to design a centralized management architecture?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 1)

Questions 1–5

When using Azure Firewall Manager, which resource is used to define a set of firewall rules that can be applied to multiple firewalls?

A company uses Azure Firewall Premium with Firewall Policy. They need to block traffic to a list of known malicious IP addresses and also block traffic to a set of malicious FQDNs. They want to manage these lists centrally and reuse them across multiple firewalls. What should you use?

An organization needs to allow inbound HTTPS traffic from the internet to a specific VM behind Azure Firewall. They also need to translate the public IP to the VM's private IP. What should they configure?

A company wants to centralize network security management for multiple Azure Firewalls across different regions. Which Azure service should they use to design a centralized management architecture?

Keep studying — Design and implement Azure network security services