A security administrator wants to prioritize network security improvements across multiple Azure subscriptions. They need to identify the most impactful network-related security recommendations and track progress over time. What should they use?

Microsoft Defender for Cloud's Secure Score

Azure Network Watcher's connection monitor

A network engineer is troubleshooting connectivity between a VM and an on-premises server through a VPN gateway. The connection monitor shows high latency but no packet loss. The engineer suspects the issue is due to a misconfigured route or NSG. What should they do next?

Check the VPN gateway metrics in Azure Monitor.

Use IP flow verify to test the specific flow and check effective routes and NSG rules.

Enable NSG flow logs to see if traffic is being denied.

Run a packet capture on the VM to see the traffic.

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 4

Monitor Networks AZ-700 Practice Questions (Page 2)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

25–30%of the exam

Questions 6–10

6application · medium
You are monitoring a VNet with Azure Monitor for Networks. You need to see the latency and packet loss between two VMs in different subnets over a period of time. Which tool should you use?
Select an answer first
7application · medium
A security administrator wants to prioritize network security improvements across multiple Azure subscriptions. They need to identify the most impactful network-related security recommendations and track progress over time. What should they use?
Select an answer first
8expert · hard
A network engineer is troubleshooting connectivity between a VM and an on-premises server through a VPN gateway. The connection monitor shows high latency but no packet loss. The engineer suspects the issue is due to a misconfigured route or NSG. What should they do next?
Select an answer first
9foundation · easy
Which Azure service provides always-on distributed denial-of-service (DDoS) protection for public IP addresses at no additional cost?
Select an answer first
10foundation · easy
Which Microsoft Defender for Cloud feature simulates potential attack paths to identify exploitable combinations of security weaknesses?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Monitor Networks AZ-700 Practice Questions (Page 2)

Questions 6–10

You are monitoring a VNet with Azure Monitor for Networks. You need to see the latency and packet loss between two VMs in different subnets over a period of time. Which tool should you use?

A security administrator wants to prioritize network security improvements across multiple Azure subscriptions. They need to identify the most impactful network-related security recommendations and track progress over time. What should they use?

A network engineer is troubleshooting connectivity between a VM and an on-premises server through a VPN gateway. The connection monitor shows high latency but no packet loss. The engineer suspects the issue is due to a misconfigured route or NSG. What should they do next?

Which Azure service provides always-on distributed denial-of-service (DDoS) protection for public IP addresses at no additional cost?

Which Microsoft Defender for Cloud feature simulates potential attack paths to identify exploitable combinations of security weaknesses?

Keep studying — Design and implement core networking infrastructure