A company is planning a new VNet for a production environment. They have two application tiers that must be isolated from each other, but both need to communicate with a shared database tier. They want to minimize the number of subnets while maintaining isolation. What is the best approach?

Create one subnet for all tiers and rely on NSGs for isolation.

Create a separate VNet for each tier and peer them together.

Create two subnets: one for both application tiers and one for the database tier.

Create three subnets: one for each application tier and one for the database tier, and use NSGs to control traffic.

A company is designing a VNet for a development environment. They have a small team and want to minimize the number of subnets to reduce management overhead. They plan to deploy VMs and a few Azure services that do not require dedicated subnets. Which subnet design should they use?

Create a separate subnet for each resource type

Use a separate VNet for each resource type

Use two subnets: one for VMs and one for Azure services

Use a single subnet for all resources

A company is deploying a hub-and-spoke network in Azure. In the hub VNet, they plan to place an Azure Firewall, a VPN gateway, and a set of VMs that will be managed by Azure Bastion. They want to minimize the number of subnets while ensuring that each service has the isolation and configuration flexibility it requires. Which subnet design should they use?

Create one subnet for the firewall, one for the VPN gateway, one for Bastion, and one shared subnet for the VMs.

Use one subnet for the firewall and VPN gateway, another for Bastion, and a third for the VMs.

Place the firewall, VPN gateway, and Bastion in the same subnet, and put the VMs in a separate subnet.

Create a single subnet for all resources, including the VMs, firewall, VPN gateway, and Bastion.

What is a primary benefit of using a shared subnet for multiple application tiers?

It provides stronger isolation between tiers

It enables the use of service endpoints for all tiers

It reduces the number of subnets and simplifies IP address management

It allows each tier to have its own network security group

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 1

Design and Implement IP Addressing for Azure Resources AZ-700 Practice Questions (Page 4)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

25–30%of the exam

Questions 16–20

16foundation · easy
Which Azure resource can you associate a public IP address with to provide internet-facing load balancing?
Select an answer first
17application · medium
A company is planning a new VNet for a production environment. They have two application tiers that must be isolated from each other, but both need to communicate with a shared database tier. They want to minimize the number of subnets while maintaining isolation. What is the best approach?
Select an answer first
18application · medium
A company is designing a VNet for a development environment. They have a small team and want to minimize the number of subnets to reduce management overhead. They plan to deploy VMs and a few Azure services that do not require dedicated subnets. Which subnet design should they use?
Select an answer first
19application · medium
A company is deploying a hub-and-spoke network in Azure. In the hub VNet, they plan to place an Azure Firewall, a VPN gateway, and a set of VMs that will be managed by Azure Bastion. They want to minimize the number of subnets while ensuring that each service has the isolation and configuration flexibility it requires. Which subnet design should they use?
Select an answer first
20foundation · easy
What is a primary benefit of using a shared subnet for multiple application tiers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Design and Implement IP Addressing for Azure Resources AZ-700 Practice Questions (Page 4)

Questions 16–20

Which Azure resource can you associate a public IP address with to provide internet-facing load balancing?

A company is planning a new VNet for a production environment. They have two application tiers that must be isolated from each other, but both need to communicate with a shared database tier. They want to minimize the number of subnets while maintaining isolation. What is the best approach?

A company is designing a VNet for a development environment. They have a small team and want to minimize the number of subnets to reduce management overhead. They plan to deploy VMs and a few Azure services that do not require dedicated subnets. Which subnet design should they use?

What is a primary benefit of using a shared subnet for multiple application tiers?

Keep studying — Design and implement core networking infrastructure