Hybrid Cloud Network Topologies CERTIFIED-HYBRID-CLOUD-ARCHITECT Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which Azure service is used to filter network traffic to and from Azure resources in a virtual network?

   • AAzure Monitor
   • BAzure Traffic Manager
   • CAzure DNS
   • DNetwork Security Group (NSG)
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is designing a hybrid cloud network. They need to ensure that the development and production environments are isolated from each other and that only specific application tiers can communicate. They also need to comply with a regulatory requirement that mandates network segmentation between payment card data and other systems. Which approach should they implement?

   • ACreate separate VPCs/VNets for development and production, and use VPC peering or VNet peering with route tables and security groups to control traffic
   • BUse a single VPC/VNet with a single subnet and rely on host-based firewalls
   • CUse a single VPC/VNet with subnets for each environment and rely on network ACLs only
   • DUse a single VPC/VNet with network security groups to filter traffic between subnets
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is setting up a hybrid cloud network. They need to ensure that all traffic between on-premises and cloud is encrypted and that only specific IP addresses from the corporate network can access the cloud resources. Which combination of measures should they implement?

   • AUse a VPN with IPsec encryption and configure network security groups or firewall rules to restrict source IP addresses
   • BUse Direct Connect without encryption and rely on network ACLs
   • CUse a VPN without IPsec and rely on the private nature of the connection
   • DUse ExpressRoute with encryption and allow all IP addresses
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which component is typically required to connect an on-premises data center to a cloud virtual network?

   • AA network security group
   • BA public IP address on every VM
   • CA virtual network gateway
   • DA load balancer
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the function of a route table in a virtual network?

   • ATo provide a public IP address to virtual machines
   • BTo filter traffic based on source and destination IP addresses
   • CTo define the path that network traffic takes within the virtual network
   • DTo encrypt traffic between virtual machines
   Reveal Solution Discussion Select an answer first