Correct Answer: Use Azure Virtual WAN with Azure Firewall Manager to deploy a secured hub and enforce traffic routing through the hub firewall
Azure Virtual WAN with Azure Firewall Manager creates a secured virtual hub, centralizing network security for all connected VNets. Firewall Manager policies are applied centrally ...
Correct Answer
Use Azure Virtual WAN with Azure Firewall Manager to deploy a secured hub and enforce traffic routing through the hub firewall
Why This Answer Is Correct
Azure Virtual WAN with Azure Firewall Manager creates a secured virtual hub, centralizing network security for all connected VNets. Firewall Manager policies are applied centrally and traffic routing through the hub firewall is enforced automatically. This scales to hundreds of VNets without manually managing UDRs in each spoke VNet.
This question evaluates your knowledge of Network Security — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Network Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You have a web application running on Azure VMs behind an Azure Application Gateway. You need to protect the application from SQL injection and cross-site scripting (XSS) attacks. Which feature of Application Gateway provides this?
You need to allow Azure Virtual Machines in a subnet to access Azure Storage and Azure Key Vault without traversing the public internet, and without assigning public IP addresses to the VMs. Which Azure feature achieves this?