Azure Firewall MCQ Questions and Answers

Mastering Azure Firewall is crucial for cloud certification success. This dedicated practice set features 177 Azure Firewall MCQ questions and answers designed to mirror real exam scenarios across various AZURE certifications.

📝 177 Questions⏱️ 90 min🎯 Pass: 70%

About Azure Firewall Practice Questions

This detailed quiz focuses on Azure Firewall, covering key concepts and scenarios often found in AZURE exams.

  • Comprehensive coverage of Azure Firewall features.
  • Scenario-based questions testing design and troubleshooting skills.
  • Detailed explanations to reinforce learning.

All 177 Azure Firewall Questions

Browse through the complete list of questions and answers below. Use this resource to review specific concepts or check your understanding of Azure Firewall.

1

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
2

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
3

What is the primary difference between Azure Firewall and Network Security Groups (NSGs)?

Azure Firewall is a managed, cloud-based network security service that protects your VNet resources at Layer 3-7 and across subscriptions; NSGs are simpler Layer 4 filters
Azure Firewall is free; NSGs cost money
NSGs are global; Azure Firewall is zonal only
There is no difference; they are the same
View Explanation
✓ Correct Answer: Azure Firewall is a managed, cloud-based network security service that protects your VNet resources at Layer 3-7 and across subscriptions; NSGs are simpler Layer 4 filtersExplanation:Azure Firewall provides advanced features like threat intelligence-based filtering and FQDN filtering that NSGs do not support.
4

Which Azure Firewall feature allows you to filter outbound traffic based on a list of domain names (e.g., allow *.microsoft.com)?

FQDN Filtering in Application Rules
Network Rules
NAT Rules
Service Tags
View Explanation
✓ Correct Answer: FQDN Filtering in Application RulesExplanation:Application rules in Azure Firewall allow you to define fully qualified domain names (FQDNs) that can be accessed from a subnet.
5

What is 'Azure Firewall Premium' specifically designed for?

Advanced security needs like IDPS (Intrusion Detection and Prevention System) and TLS inspection
Small businesses with one VM
Only for storage accounts
To replace all NSGs in the subscription
View Explanation
✓ Correct Answer: Advanced security needs like IDPS (Intrusion Detection and Prevention System) and TLS inspectionExplanation:The Premium SKU provides signature-based IDPS to detect and block attacks by looking for specific patterns.
6

In a Hub-and-Spoke network topology, where is the Azure Firewall typically deployed?

In a dedicated 'hub' virtual network
In every spoke VNet
In the on-premises data center
In a resource group without a VNet
View Explanation
✓ Correct Answer: In a dedicated 'hub' virtual networkExplanation:Centrally deploying the firewall in the hub VNet allows you to inspect traffic between spokes and between spokes and the internet/on-premises.
7

What is 'Threat Intelligence-based filtering' in Azure Firewall?

A feature that automatically alerts or denies traffic from known malicious IP addresses and domains
A manual list of IPs provided by the administrator
A tool that scans VMs for viruses
An AI that writes firewall rules automatically
View Explanation
✓ Correct Answer: A feature that automatically alerts or denies traffic from known malicious IP addresses and domainsExplanation:Threat intelligence is updated in near real-time by Microsoft to protect against evolving threats.
8

Which Azure component is required to route traffic from a spoke VNet through a central Azure Firewall in the hub?

A User-Defined Route (UDR) pointing to the firewall's private IP
A special NSG rule
VNet peering settings only
An Azure Load Balancer
View Explanation
✓ Correct Answer: A User-Defined Route (UDR) pointing to the firewall's private IPExplanation:You must create a route table with a 0.0.0.0/0 route pointing to the firewall's private IP as the next hop.
9

What is 'Azure Firewall Manager'?

A security management service that provides central security policy and route management for cloud-based security perimeters
A dashboard for viewing firewall logs
An entry-level version of Azure Firewall
A script that configures NSGs
View Explanation
✓ Correct Answer: A security management service that provides central security policy and route management for cloud-based security perimetersExplanation:Firewall Manager allows you to manage multiple firewall instances across different regions and subscriptions.
10

Is Azure Firewall a stateful service?

Yes, it maintains the state of the connection and automatically allows response traffic
No, it is stateless like a NACL
Only for TCP traffic
Only in the Premium SKU
View Explanation
✓ Correct Answer: Yes, it maintains the state of the connection and automatically allows response trafficExplanation:Being stateful is a core characteristic of modern firewalls like Azure Firewall.
11

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
12

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
13

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
14

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Azure Firewall
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
15

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
16

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
17

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
18

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
19

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
20

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
21

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
22

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Azure Firewall
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
23

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
24

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
25

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
26

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
27

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
28

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
29

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
30

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
31

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
32

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
33

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
34

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Network Security Groups (NSG)
Azure Web Application Firewall
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
35

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
36

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
37

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
38

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
39

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
40

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
41

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
42

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
43

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
44

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
45

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
46

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
47

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
48

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Route Tables
Azure Firewall
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
49

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
50

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
51

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
52

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
53

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
54

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
55

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
56

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
57

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
58

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
59

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
60

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
61

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
62

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
63

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
64

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Firewall
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
65

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
66

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
67

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
68

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
69

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
70

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
71

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
72

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Azure Firewall
Route Tables
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
73

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
74

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
75

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
76

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Route Tables
Azure Firewall
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
77

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
78

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
79

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
80

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
81

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
82

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
83

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
84

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
85

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
86

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
87

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
88

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
89

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
90

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Network Security Groups (NSG)
Azure Web Application Firewall
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
91

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
92

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
93

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
94

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Web Application Firewall
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
95

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
96

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Firewall
Azure Web Application Firewall
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
97

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
98

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
99

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
100

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Route Tables
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
101

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
102

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Azure Web Application Firewall
Route Tables
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
103

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
104

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
105

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
106

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
107

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
108

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
109

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
110

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
111

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
112

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
113

To inspect and filter all East-West traffic between your Azure VNets and North-South traffic from your VNet to the internet, which centralized security service should you deploy?

Azure Firewall
Network Security Groups
Azure Bastion
Azure Private Link
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall is a managed, cloud-native network security service that protects your Azure Virtual Network resources.
114

To protect your public-facing web applications from DDoS attacks that target the application layer (Layer 7), which feature of Azure Front Door or Application Gateway should you enable?

Web Application Firewall (WAF)
Azure DDoS Protection (Network Protection)
NSG rules
Traffic Manager
View Explanation
✓ Correct Answer: Web Application Firewall (WAF)Explanation:WAF provides a specialized layer of protection against application-layer attacks like SQLi, XSS, and L7 floods.
115

Which Azure security service allows you to centrally manage and deploy firewall rules across multiple virtual networks and regions using a single management policy?

Azure Firewall Manager
Azure Policy
Management Groups
Network Security Groups
View Explanation
✓ Correct Answer: Azure Firewall ManagerExplanation:Firewall Manager provides a central management platform to secure multiple Azure Firewall instances and Virtual Hubs.
116

An organization wants to implement 'Zero Trust' networking and wants to ensure that all internal API traffic is inspected by a central firewall without needing to manage complex 'User Defined Routes' (UDR) for every subnet. Which feature helps automate the routing to the firewall?

Virtual WAN Hub with Azure Firewall (Secure Hub)
Standard VNet Peering
Network Security Groups
Azure Private Link
View Explanation
✓ Correct Answer: Virtual WAN Hub with Azure Firewall (Secure Hub)Explanation:A Secure Hub in Virtual WAN automatically configures the necessary routing to ensure all VNet and branch traffic is inspected by the firewall with minimal manual effort.
117

Which Azure networking feature allows you to connect multiple VNets in different subscriptions to a central 'Firewall VNet' for traffic inspection without needing to create manual 'User Defined Routes' (UDR) for every subnet?

Azure Virtual WAN using 'Secure Virtual Hub'
VNet Peering
Azure Network Firewall
Azure Private Link
View Explanation
✓ Correct Answer: Azure Virtual WAN using 'Secure Virtual Hub'Explanation:Secure Virtual Hub in vWAN automates the routing of traffic to the Azure Firewall, simplifying management for large-scale architectures.
118

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
119

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
120

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
121

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Route Tables
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
122

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
123

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
124

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
125

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
126

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
127

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
128

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
129

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
130

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
131

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
132

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
133

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Web Application Firewall
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
134

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
135

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
136

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
137

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
138

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
139

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
140

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
141

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
142

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
143

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
144

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
145

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
146

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
147

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
148

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
149

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
150

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
151

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
152

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
153

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
154

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
155

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
156

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
157

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
158

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
159

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
160

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
161

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
162

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
163

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
164

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
Configure Azure Active Directory (Entra ID) policies
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
165

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
166

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
167

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Firewall
Route Tables
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
168

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
169

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Firewall
Azure Web Application Firewall
Route Tables
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
170

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
No, use Azure Firewall or equivalent for explicit deny rules
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
171

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Azure Web Application Firewall
Network Security Groups (NSG)
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
172

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
173

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Network Security Groups (NSG)
Azure Web Application Firewall
Route Tables
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
174

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Use Azure Web Application Firewall
Yes, add a deny rule to Network Security Groups (NSG)
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
175

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Firewall
Network Security Groups (NSG)
Azure Web Application Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.
176

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

No, use Azure Firewall or equivalent for explicit deny rules
Configure Azure Active Directory (Entra ID) policies
Yes, add a deny rule to Network Security Groups (NSG)
Use Azure Web Application Firewall
View Explanation
✓ Correct Answer: No, use Azure Firewall or equivalent for explicit deny rulesExplanation:Network Security Groups (NSG) typically support allow rules only. Azure Firewall support both allow and deny rules, making them suitable for blocking unwanted IP addresses.
177

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

Route Tables
Azure Web Application Firewall
Network Security Groups (NSG)
Azure Firewall
View Explanation
✓ Correct Answer: Azure FirewallExplanation:Azure Firewall operate at the subnet level and are stateless, requiring you to define both inbound and outbound rules explicitly.