When implementing an Azure Firewall deployment, which Azure resource must be created first to provide a dedicated private IP address for the firewall?

Subnet named AzureFirewallSubnet

A company is deploying Azure Virtual WAN with a secure hub. They need to inspect traffic between VNets connected to the hub and also filter outbound internet traffic. What should they deploy in the Virtual WAN hub?

Network Virtual Appliance (NVA)

An organization uses Azure Firewall Manager to manage multiple firewalls. What is the primary benefit of using Azure Firewall Manager policies?

They enable VPN connectivity between on-premises and Azure

They allow centralized management of firewall rules across multiple firewalls

They provide DDoS protection for all virtual networks

They automatically scale firewalls based on traffic

A global company has multiple Azure Virtual WAN hubs in different regions, each with an Azure Firewall. They want to centrally manage firewall policies and ensure consistent rule enforcement across all hubs. What should they use?

Create a separate firewall policy for each hub and manage them individually

Use Azure Network Watcher to configure firewall rules

Deploy a single Azure Firewall policy and associate it with all Virtual WAN hubs

Use Azure Policy to enforce firewall rules

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 2

Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 3)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

15–20%of the exam

Questions 11–15

11foundation · easy
When implementing an Azure Firewall deployment, which Azure resource must be created first to provide a dedicated private IP address for the firewall?
Select an answer first
12application · medium
A company is deploying Azure Virtual WAN with a secure hub. They need to inspect traffic between VNets connected to the hub and also filter outbound internet traffic. What should they deploy in the Virtual WAN hub?
Select an answer first
13foundation · easy
An organization uses Azure Firewall Manager to manage multiple firewalls. What is the primary benefit of using Azure Firewall Manager policies?
Select an answer first
14application · medium
A company is evaluating Azure Firewall SKUs for a new deployment. They need to support IDPS with TLS inspection and expect a throughput of up to 30 Gbps. They also need to use Firewall Policy for centralized management. Which SKU should you choose?
Select an answer first
15application · medium
A global company has multiple Azure Virtual WAN hubs in different regions, each with an Azure Firewall. They want to centrally manage firewall policies and ensure consistent rule enforcement across all hubs. What should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.