Describe Azure Compute and Networking Services AZ-900 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A company has a virtual network with a single subnet that contains both web servers and database servers. The security team wants to ensure that the database servers cannot be accessed directly from the internet, while the web servers must be accessible. What should the company do?

   • AUse Azure DNS to block internet access to the database servers
   • BMove the database servers to a different virtual network
   • CApply a network security group to the existing subnet that denies all inbound traffic
   • DCreate a second subnet for the database servers and apply a network security group that denies inbound internet traffic
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a key characteristic of Azure VPN Gateway connections?

   • AThey provide a dedicated private connection that does not use the internet.
   • BThey are only used for point-to-site connections.
   • CThey automatically scale bandwidth based on demand.
   • DThey encrypt traffic between on-premises networks and Azure over the public internet.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the primary purpose of an Azure virtual network?

   • ATo provide a global DNS service for all Azure resources.
   • BTo enable secure communication between Azure resources, the internet, and on-premises networks.
   • CTo automatically scale virtual machines based on demand.
   • DTo store virtual machine disks.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company has a web application hosted on an Azure VM. The VM is currently on a virtual network with no public IP address. The company wants to allow customers to access the web application from the internet. What should they do?

   • AEnable Azure Bastion for the VM
   • BUse Azure DNS to resolve the VM's private IP address
   • CCreate a private endpoint for the VM
   • DAssign a public IP address to the VM and add an inbound security rule to allow traffic on port 443
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company has two Azure virtual networks in different Azure regions. VNet A hosts a web application and VNet B hosts a backend database. The web application must access the database, but the company wants to minimize latency and avoid traffic going over the public internet. They also want to avoid using a VPN gateway due to cost. What should they implement?

   • AUse Azure Front Door to route traffic between the VNets
   • BUse ExpressRoute to connect the two VNets
   • CConfigure global virtual network peering between VNet A and VNet B
   • DConfigure a site-to-site VPN between the two VNets
   Reveal Solution Discussion Select an answer first