A company is deploying Azure Firewall in a hub VNet to inspect traffic between spoke VNets and to the internet. They need to ensure that all traffic from spoke VNets to the internet is forced through the firewall. What should they configure?

Azure Firewall Manager to automatically route all traffic

Network security groups on the spoke subnets to block internet access

User-defined routes on the spoke subnets pointing to the firewall's private IP

A VPN gateway in the hub VNet to route traffic

A global company is deploying Azure Virtual WAN with multiple regional hubs. They need to inspect all traffic between on-premises sites and VNets, and they want to manage firewall rules centrally for all hubs. They also want to use the same firewall policy across all hubs. What should you implement?

Use Azure Firewall Manager to create a hub VNet in each region and then connect them with ExpressRoute.

Deploy Azure Firewall as a secured virtual hub in each region and associate a single Firewall Policy with all hubs.

Deploy Azure Firewall in each spoke VNet and route traffic through the hub using user-defined routes.

Deploy a standalone Azure Firewall in each hub VNet and connect them with VNet peering.

A company is deploying Azure Firewall in a central hub VNet to filter traffic for multiple production workloads. They expect sustained throughput of 15 Gbps and need to use IDPS with TLS inspection. They also want to use the same firewall policy across several firewalls in different regions. Which Azure Firewall SKU and policy model should you recommend?

Premium SKU with classic rules and a separate policy for each firewall.

Standard SKU with Firewall Policy and a parent policy for inheritance.

Standard SKU with classic rules and a single policy per firewall.

Premium SKU with Firewall Policy and a parent policy that child policies inherit from.

A security team wants to block traffic to known malicious IP addresses using Azure Firewall. Which feature should they enable to automate this?

Threat intelligence-based filtering

Microsoft Certified:Azure Network Engineer Associate

Domain 5Objective 2

Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 4)

Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

7concepts

15–20%of the exam

Questions 16–20

16application · medium
A company is deploying Azure Firewall in a hub VNet to inspect traffic between spoke VNets and to the internet. They need to ensure that all traffic from spoke VNets to the internet is forced through the firewall. What should they configure?
Select an answer first
17foundation · easy
An administrator needs to allow outbound HTTPS traffic to a specific website from Azure virtual machines. Which type of Azure Firewall rule should they configure?
Select an answer first
18application · medium
A global company is deploying Azure Virtual WAN with multiple regional hubs. They need to inspect all traffic between on-premises sites and VNets, and they want to manage firewall rules centrally for all hubs. They also want to use the same firewall policy across all hubs. What should you implement?
Select an answer first
19application · medium
A company is deploying Azure Firewall in a central hub VNet to filter traffic for multiple production workloads. They expect sustained throughput of 15 Gbps and need to use IDPS with TLS inspection. They also want to use the same firewall policy across several firewalls in different regions. Which Azure Firewall SKU and policy model should you recommend?
Select an answer first
20foundation · easy
A security team wants to block traffic to known malicious IP addresses using Azure Firewall. Which feature should they enable to automate this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 4)

Questions 16–20

A company is deploying Azure Firewall in a hub VNet to inspect traffic between spoke VNets and to the internet. They need to ensure that all traffic from spoke VNets to the internet is forced through the firewall. What should they configure?

An administrator needs to allow outbound HTTPS traffic to a specific website from Azure virtual machines. Which type of Azure Firewall rule should they configure?

A security team wants to block traffic to known malicious IP addresses using Azure Firewall. Which feature should they enable to automate this?

Keep studying — Design and implement Azure network security services