Hybrid Cloud Networking CERTIFIED-HYBRID-CLOUD-IMPLEMENTATION-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   You are comparing a site-to-site VPN and Azure ExpressRoute for a hybrid application that requires high throughput and low latency. You have a limited budget and need to choose the most cost-effective option that meets the performance requirements. What should you consider?

   • AExpressRoute is always more expensive but provides better performance
   • BThe number of VPN tunnels required
   • CVPN is always cheaper but may not meet latency requirements
   • DThe total cost of ownership, including bandwidth, data transfer, and support
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A site-to-site VPN between on-premises and Azure is down. The VPN gateway shows 'Connected' in the portal, but traffic is not flowing. Which tool should you use to diagnose the issue?

   • AAzure Resource Health
   • BAzure Monitor metrics
   • CAzure Advisor
   • DAzure Network Watcher IP flow verify
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When planning IP addressing for a hybrid cloud network, what is the primary reason to avoid overlapping CIDR ranges between on-premises and cloud VPCs?

   • ATo increase the available bandwidth of the connection
   • BTo prevent routing conflicts and ensure traffic is correctly forwarded
   • CTo reduce the number of security groups required
   • DTo enable automatic DNS resolution between environments
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which cloud service is commonly used to collect and analyze network flow logs for troubleshooting in a hybrid cloud environment?

   • ACloud DNS
   • BVPC Flow Logs
   • CLoad Balancer
   • DCloud Storage
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In a cloud VPC, what is the difference between a security group and a network ACL?

   • ASecurity groups are stateful and operate at the instance level; network ACLs are stateless and operate at the subnet level
   • BSecurity groups and network ACLs are both stateful and operate at the instance level
   • CSecurity groups are stateless and operate at the subnet level; network ACLs are stateful and operate at the instance level
   • DSecurity groups and network ACLs are both stateless and operate at the subnet level
   Reveal Solution Discussion Select an answer first