When would you choose to use a dedicated subnet for a specific Azure service rather than a shared subnet?

When you want to allow all resources to communicate without any restrictions

When you want to assign a public IP address to the subnet

When you want to reduce the total number of subnets in the virtual network

When the service requires its own subnet to function, such as Azure Firewall or a virtual network gateway

Your organization is deploying Azure Firewall in a hub VNet. The firewall requires a dedicated subnet. You also plan to use Azure Bastion in the same VNet. What subnet configuration should you use?

Create a single subnet and delegate it to Microsoft.Network/azureFirewalls.

Create a subnet named 'AzureFirewallSubnet' and place Azure Bastion in the same subnet.

Place Azure Firewall in the GatewaySubnet and Azure Bastion in a separate subnet.

Create a dedicated subnet for Azure Firewall named 'AzureFirewallSubnet' and a dedicated subnet for Azure Bastion named 'AzureBastionSubnet'.

What is the primary purpose of creating a virtual network (VNet) in Azure?

To store virtual machine disks for high availability

To provide a public IP address for each virtual machine

To establish a private network in Azure where resources can securely communicate with each other and with on-premises networks

To provide a global DNS service for Azure resources

Before you can use a Custom IP Address Prefix in Azure, what must you do?

Create a virtual network with the same address space

Provision the prefix in the Azure portal and wait for it to be assigned automatically

Associate it with a load balancer first

Prove ownership of the IP range and register it with Azure

What is the purpose of subnet delegation in Azure?

To allow a specific Azure service to deploy resources directly into the subnet and manage it

To enable a subnet to communicate with on-premises networks

To restrict traffic between subnets using network security groups

To assign a public IP address to a subnet

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 1

Design and Implement IP Addressing for Azure Resources AZ-700 Practice Questions (Page 3)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

25–30%of the exam

Questions 11–15

11foundation · easy
When would you choose to use a dedicated subnet for a specific Azure service rather than a shared subnet?
Select an answer first
12application · medium
Your organization is deploying Azure Firewall in a hub VNet. The firewall requires a dedicated subnet. You also plan to use Azure Bastion in the same VNet. What subnet configuration should you use?
Select an answer first
13foundation · easy
What is the primary purpose of creating a virtual network (VNet) in Azure?
Select an answer first
14foundation · easy
Before you can use a Custom IP Address Prefix in Azure, what must you do?
Select an answer first
15foundation · easy
What is the purpose of subnet delegation in Azure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.