Skip to content

Design, implement, and manage connectivity services Questions

Practice questions for Design, implement, and manage connectivity services topic in Microsoft Certified: Azure Network Engineer Associate. 44 questions covering this domain.

44 questions11 easy22 medium11 hard
Q1
medium

A network team has two on-premises datacenters, each attached to its own ExpressRoute circuit, and wants those sites to exchange traffic over the Micr...

Q2
hard

A legacy on-premises VPN device supports only static routing. Which Azure VPN type is the best match for that constraint?

Q3
hard

An organization wants a managed global transit architecture that can connect branches, remote users, ExpressRoute circuits, and Azure virtual networks...

Q4
easy

Which point-to-site VPN protocol supports Microsoft Entra ID authentication in Azure?

Q5
medium

Remote users on Windows, macOS, and Linux must connect with point-to-site VPN by using Microsoft Entra ID, Conditional Access, and MFA. Which client a...

Q6
medium

A design requires more than 100 site-to-site VPN tunnels. Which recommendation aligns with Microsoft guidance?

Q7
medium

A company already uses ExpressRoute for primary connectivity and wants an encrypted failover path over the internet if the private circuit becomes una...

Q8
easy

Which VPN gateway routing type is required for Azure point-to-site VPN connections?

Q9
medium

A circuit is provisioned in one geopolitical region, but the company now needs private connectivity to Azure regions around the world through that sam...

Q10
hard

In Azure Virtual WAN, branch users connected through VPN must communicate with sites connected through ExpressRoute. Which prerequisite must be satisf...

Q11
easy

Which Azure connectivity service extends an on-premises network into Microsoft cloud services over a private connection that doesn't traverse the publ...

Q12
medium

A branch office needs cost-effective private connectivity to Azure regions near a peering location, and the team wants data transfer included in the p...

Q13
hard

A customer needs zone-redundant ExpressRoute connectivity in a region with availability zones. Which gateway SKU and design should be used?

Q14
medium

Which Virtual WAN routing concept lets you isolate VNets so they share connectivity to a hub gateway but cannot route between each other?

Q15
easy

Which Azure VPN Gateway SKU is required to use BGP, active-active configuration, and zone-redundancy?

Q16
medium

Which Virtual WAN component is configured to inspect inter-hub and branch traffic with Azure Firewall and to use Routing Intent for private/internet t...

Q17
medium

Which ExpressRoute capability enables high-throughput data paths that bypass the ExpressRoute virtual network gateway data plane to send traffic direc...

Q18
medium

An organization wants to encrypt traffic across an ExpressRoute private peering between on-premises and Azure. Which option is supported by Microsoft?

Q19
hard

A regulated workload uses ExpressRoute and must enforce that on-prem advertises only specific prefixes; unexpected ranges should be rejected at the Az...

Q20
medium

An on-prem device announces a default route 0.0.0.0/0 over BGP into Azure via the VPN gateway. Which gateway setting must be enabled to accept and pro...

Sign in to see all 44 questions

Create a free account to browse all questions — completely free during our launch phase.