A security team is using Microsoft Defender for Cloud to prioritize remediation. They have a limited budget and need to fix the most critical network security issues first. They have identified several attack paths. Which approach should they take?

Remediate all recommendations in the order they appear in the secure score dashboard.

Use Cloud Security Explorer to find all resources with public IPs and remediate them first.

Prioritize recommendations that appear in attack paths and have the highest secure score impact.

Focus only on recommendations that affect the most resources.

A company has a multi-region deployment with VNets in East US and West US. They are experiencing intermittent connectivity issues between two VMs in different regions. They want to use Network Watcher connection monitor to troubleshoot. They have enabled Network Watcher in both regions. What else is required to use connection monitor?

Enable NSG flow logs on the subnets of both VMs.

Install the Network Watcher extension on both VMs and ensure they have outbound connectivity to the monitoring endpoints.

Create a Log Analytics workspace in each region and configure diagnostic settings on the VMs.

Create a public IP for each VM to allow the monitoring traffic.

A company wants to protect its public IP addresses from DDoS attacks. They have a mix of VNets, some with and some without DDoS protection. They want to enable DDoS protection for a specific public IP that is not in a protected VNet. What should they do?

Create a new VNet and move the public IP to it.

Use Azure Firewall to protect the public IP.

Enable DDoS Network Protection on the VNet that contains the public IP.

Enable DDoS IP Protection on the public IP address.

A security team is reviewing their Secure Score and notices that a network recommendation has a high potential score increase but the remediation would require downtime. They need to decide whether to remediate now or later. What should they consider first?

The compliance requirements of the organization.

The number of resources affected by the recommendation.

The cost of implementing the recommendation.

The potential score increase and the risk of the vulnerability being exploited.

Microsoft Certified:Azure Network Engineer Associate

Domain 1Objective 4

Monitor Networks AZ-700 Practice Questions (Page 3)

Part of the Design and implement core networking infrastructure domain, which accounts for 25–30% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–5 from this objective — we provide 40 practice questions to prepare you well beyond it. (estimate)

40questions here

8free pages

7concepts

25–30%of the exam

Questions 11–15

11expert · hard
A security team is using Microsoft Defender for Cloud to prioritize remediation. They have a limited budget and need to fix the most critical network security issues first. They have identified several attack paths. Which approach should they take?
Select an answer first
12expert · hard
A company has a multi-region deployment with VNets in East US and West US. They are experiencing intermittent connectivity issues between two VMs in different regions. They want to use Network Watcher connection monitor to troubleshoot. They have enabled Network Watcher in both regions. What else is required to use connection monitor?
Select an answer first
13application · medium
A company wants to protect its public IP addresses from DDoS attacks. They have a mix of VNets, some with and some without DDoS protection. They want to enable DDoS protection for a specific public IP that is not in a protected VNet. What should they do?
Select an answer first
14expert · hard
A security team is reviewing their Secure Score and notices that a network recommendation has a high potential score increase but the remediation would require downtime. They need to decide whether to remediate now or later. What should they consider first?
Select an answer first
15foundation · easy
Which Microsoft Defender for Cloud tool allows you to query and explore your cloud resources, including network resources, using a graph-based interface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.

Monitor Networks AZ-700 Practice Questions (Page 3)

Questions 11–15

A security team is using Microsoft Defender for Cloud to prioritize remediation. They have a limited budget and need to fix the most critical network security issues first. They have identified several attack paths. Which approach should they take?

A company wants to protect its public IP addresses from DDoS attacks. They have a mix of VNets, some with and some without DDoS protection. They want to enable DDoS protection for a specific public IP that is not in a protected VNet. What should they do?

A security team is reviewing their Secure Score and notices that a network recommendation has a high potential score increase but the remediation would require downtime. They need to decide whether to remediate now or later. What should they consider first?

Which Microsoft Defender for Cloud tool allows you to query and explore your cloud resources, including network resources, using a graph-based interface?

Keep studying — Design and implement core networking infrastructure