AZ-900 Episode 23 - Practice Test

Practical Azure Engineering

Posts (63) Videos (89) News (2)

Practice Test

Question 1

Azure Firewall is a service that …

✔ That's correct
❌ That's not correct
👨‍🦱 💬 Azure Firewall allows customers to filter both inbound and outbound traffic for Azure Virtual Network resources.

Question 2

Which Azure services can be used to filter the traffic based on network protocol and/or IP address? Choose 2.

✔ That's correct
❌ That's not correct
👨‍🦱 💬 Both Azure Firewall and Network Security Groups allow for filtering of networking traffic based on protocol and IP address.

Question 3

By default all traffic through the firewall is blocked, a rule has to be added in order to enable traffic flow. True or false?

✔ That's correct
❌ That's not correct
👨‍🦱 💬 This is true. When provisioned, Azure Firewall will block all traffic because the default rule is set to ‘deny’.

Question 4

Conotoso company wants to block all traffic to the internet websites from their network with exception of domain names like www.contoso.com and www.internal.conotoso-partner.com. For that they want to use Network Security Groups, will it solve their challenge?

✔ That's correct
❌ That's not correct
👨‍🦱 💬 No, Azure NSGs do not offer features for creating rules based on FQDN (fully qualified domain name). Contoso should use Azure Firewall.
◀ Previous Episode Next Episode ▶

Adam Marczak

I've spent most of my career working with software and cloud technologies, but at heart I'm simply someone who loves learning new things and sharing what I discover. Through this blog and my Azure 4 Everyone YouTube channel, I try to make Azure and cloud computing more approachable for developers, architects, and anyone curious about technology.

Did you enjoy the article?

Support me

Join as member

Share it

More tagged posts