Microsoft Certified:Azure Network Engineer Associate
Domain 5Objective 2
Design and Implement Azure Firewall and Azure Firewall Manager AZ-700 Practice Questions (Page 5)
Part of the Design and implement Azure network security services domain, which accounts for 15–20% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)
33questions here
7free pages
7concepts
15–20%of the exam
Questions 21–25
- 21
An organization is deploying Azure Firewall in a hub VNet. They need to ensure that the firewall can be reached from on-premises networks via ExpressRoute and from peered VNets. What should they configure?
Select an answer first - 22
An organization wants to inspect traffic between virtual networks in the same Azure region using Azure Firewall. Which Azure Firewall feature enables this inspection?
Select an answer first - 23
An organization needs a cost-effective Azure Firewall deployment for a small environment with basic outbound filtering requirements. Which Azure Firewall SKU should they choose?
Select an answer first - 24
A company is using Azure Firewall to filter outbound traffic from a production subnet. They need to allow outbound HTTPS traffic to a specific set of FQDNs, but they also need to block traffic to a known malicious IP address regardless of the FQDN. Which combination of rule types should you use?
Select an answer first - 25
When deploying Azure Firewall in a Virtual WAN hub, which component is required to enable the firewall to inspect traffic?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.