Which property of alert logic supports the choice between static and dynamic evaluation?
a) Action Group b) Alert State c) Threshold d) Target Resource
Correct Answer: c) Threshold
Explanation: The threshold property determines how alerts are evaluated and can be set to dynamic conditions.
Question 42
Which Azure service supports monitoring performance for on-premises websites?
a) Azure Monitor b) Application Insights c) Azure Security Center d) Azure Log Analytics
Correct Answer: b) Application Insights
Explanation: Application Insights can monitor and analyze performance metrics for applications, including those hosted on-premises.
Question 43
Which CIDR notation represents a private IP address range that can be used for Azure virtual networks?
a) 192.168.1.0/24 b) 10.255.0.0/16 c) 172.16.0.0/12 d) All of the above
Correct Answer: d) All of the above
Explanation: All provided CIDR notations represent valid private IP address ranges for Azure VNets.
Question 44
What is the first private IP address assignable to an interface on a subnet with a range of 10.0.0.0/24?
a) 10.0.0.0 b) 10.0.0.1 c) 10.0.0.2 d) 10.0.0.255
Correct Answer: b) 10.0.0.1
Explanation: The first assignable IP in a subnet is typically the first address after the network address.
Question 45
What is the default behavior of an Azure network security group regarding internet traffic?
a) Inbound internet traffic is allowed, outbound is blocked b) Inbound internet traffic is blocked, outbound is allowed c) Both inbound and outbound traffic is allowed d) Both inbound and outbound traffic is blocked
Correct Answer: b) Inbound internet traffic is blocked, outbound is allowed
Explanation: By default, Azure NSGs block incoming traffic from the internet while allowing outgoing traffic.
Question 46
Which additional Azure resource is required to implement Azure Bastion?
a) Virtual network b) Public IP address c) Network security group d) Azure Monitor
Correct Answer: b) Public IP address
Explanation: A public IP address is necessary for Azure Bastion to provide secure RDP and SSH access.
Question 47
What is the OSI model layer for Azure Application Gateway traffic routing?
a) Layer 4 b) Layer 5 c) Layer 6 d) Layer 7
Correct Answer: d) Layer 7
Explanation: Azure Application Gateway operates at Layer 7 to handle HTTP/S traffic.
Question 48
Which Azure resource is required to implement Azure Monitor for Networks?
a) Azure Log Analytics workspace b) Virtual network c) Azure Storage account d) Azure Application Gateway
Correct Answer: a) Azure Log Analytics workspace
Explanation: An Azure Log Analytics workspace is needed to store and analyze network monitoring data.
Question 49
Which Azure Network Watcher service provides the ability to identify a network security group rule that is blocking network communication?
a) Next Hop b) IP Flow Verify c) Connection Troubleshoot d) Network Topology
Correct Answer: b) IP Flow Verify
Explanation: IP Flow Verify helps diagnose if a network flow is allowed or blocked by NSG rules.
Question 50
What is the minimum size of the virtual network subnet required to create an Azure VPN gateway?
a) /24 b) /28 c) /29 d) /30
Correct Answer: c) /29
Explanation: A /29 subnet is the minimum size required for a VPN gateway to function properly.