Microsoft Certified: Azure Network Engineer Associate Practice Exam: Test Your Knowledge 2025

Your organization is planning to connect an on-premises datacenter to Azure using a VPN connection. The connection must support up to 10 Gbps bandwidth and provide a private, dedicated connection that doesn't traverse the public internet. Which Azure service should you implement?

You are implementing a hub-and-spoke network topology in Azure with multiple virtual networks. The hub VNet contains shared services including a firewall. Spoke VNets need to communicate with each other through the hub. What configuration is required on the virtual network peering connections?

Your company needs to distribute incoming HTTPS traffic across multiple Azure VMs deployed across different availability zones in a single region. The solution must support SSL termination, cookie-based session affinity, and URL-based routing. Which Azure load balancing solution should you recommend?

You need to monitor and diagnose connectivity issues between an Azure VM and an external website. The solution must capture packet-level details and analyze network traffic patterns. Which Azure Network Watcher capability should you use?

A company has deployed Azure Virtual WAN with multiple site-to-site VPN connections to branch offices. They want to enable direct connectivity between branch offices without traffic traversing Azure. Which Virtual WAN feature should be enabled?

You are designing a virtual network that will host web applications requiring internet connectivity and database servers that must not have direct internet access. The web tier is in subnet 10.0.1.0/24 and the database tier is in subnet 10.0.2.0/24. What is the recommended approach to meet these requirements?

Your organization uses Azure Front Door to distribute traffic globally across multiple backend pools in different Azure regions. You need to implement health probes that verify application-level functionality by checking a specific URL path that returns a 200 status code. What is the minimum probe interval you can configure?

You need to troubleshoot an issue where a VM in Azure cannot connect to an on-premises resource through an ExpressRoute connection. The ExpressRoute circuit shows as 'Enabled' and 'Provisioned' in the Azure portal. Which Network Watcher tool should you use first to verify the routing path?

A company has implemented Azure Application Gateway with Web Application Firewall (WAF) in prevention mode. After deployment, legitimate users report that certain application features are blocked. What approach should you take to resolve this while maintaining security?

You need to design a solution that provides secure access to multiple Azure VMs for remote administration without exposing RDP/SSH ports to the internet and without requiring a VPN connection. Which Azure service should you implement?

Your company uses ExpressRoute with Microsoft peering to access Microsoft 365 services. You need to implement route filtering to only advertise routes for specific Microsoft 365 services and reduce the number of routes in your on-premises network. What should you configure?

You are implementing an Azure Load Balancer Standard SKU to distribute traffic across VMs in multiple availability zones. The application requires that client connections from the same source IP always reach the same backend VM. What should you configure?

A virtual network has multiple subnets with VMs that need to access Azure Storage and Azure SQL Database. You want to ensure traffic to these services doesn't traverse the public internet and stays on the Azure backbone network. What should you implement?

You are troubleshooting connectivity issues in a hub-and-spoke topology where spoke VMs cannot reach the internet through an Azure Firewall deployed in the hub VNet. Virtual network peering is configured correctly. What is the most likely cause?

Your organization needs to implement a global load balancing solution that routes users to the nearest available endpoint based on geography and provides automatic failover. The solution must support HTTP/HTTPS traffic with SSL offloading and caching capabilities. Which Azure service should you use?

You need to configure ExpressRoute to provide connectivity between your on-premises network and Azure. The solution must provide redundancy and ensure that if one ExpressRoute circuit fails, traffic automatically fails over to another circuit. What should you implement?

You are implementing Network Security Groups (NSGs) for a three-tier application with web, application, and database tiers in separate subnets. Following the principle of least privilege, where should you apply NSG rules?

Your company is using Azure Application Gateway with multiple backend pools for different applications. You need to route traffic based on the URL path: /api/* should go to API backend pool and /web/* should go to Web backend pool. What Application Gateway feature should you configure?

You are using Azure Network Watcher Connection Monitor to track connectivity between on-premises servers and Azure VMs. The monitoring shows intermittent packet loss during specific hours. What additional Network Watcher feature should you enable to diagnose the issue further?

Your organization has deployed Azure Virtual WAN with both ExpressRoute and site-to-site VPN connections. You need to ensure that traffic between Azure VNets and on-premises preferentially uses ExpressRoute, but can fail over to VPN if ExpressRoute becomes unavailable. What should you configure?