MS Azure D315 ITEC 2112 Network & Security
Foundations
Objective Assessment Review (Qns & Ans)
2025
Multiple Choice Questions
What is the purpose of Azure Network Security Groups (NSGs)?
A) Load balancing
B) Firewall configuration
C) Network traffic filtering
©2025
,D) VPN connectivity Correct ANS: C Rationale: NSGs are used
to control inbound and outbound network traffic to Azure
resources.
Which protocol does Azure VPN Gateway primarily use for
establishing secure tunnels?
A) FTP
B) IKEv2
C) HTTP
D) SMTP Correct ANS: B Rationale: Azure VPN Gateway
primarily uses IKEv2 for secure tunnel establishment.
Which Azure service provides distributed denial-of-service
(DDoS) protection?
A) Azure Application Gateway
B) Azure Firewall
C) Azure DDoS Protection
D) Azure Sentinel Correct ANS: C Rationale: Azure DDoS
Protection offers enhanced DDoS attack mitigation.
In the context of Azure Active Directory, what is a conditional
access policy?
A) A method for data encryption
©2025
,B) A rule that grants or restricts access based on certain
conditions
C) A type of OS patch management
D) A mechanism for user authentication Correct ANS: B
Rationale: Conditional access policies determine how users can
access applications based on various conditions.
Which Azure service is specifically designed to manage
encryption keys?
A) Azure Key Vault
B) Azure Blob Storage
C) Azure Active Directory
D) Azure DevOps Correct ANS: A Rationale: Azure Key Vault is
used to manage encryption keys and secrets securely.
Fill-in-the-Blank Questions
Azure offers a service known as ________ to provide secure
connections between on-premises networks and Azure resources.
Correct ANS: VPN Gateway
Rationale: VPN Gateway creates secure site-to-site connections.
The principle of ________ ensures that users have only the
minimum permissions necessary to perform their tasks.
Correct ANS: Least Privilege
©2025
, Rationale: Least privilege is a security best practice in access
management.
In Azure, ________ enables you to define a set of rules that
govern the security posture of your applications.
Correct ANS: Security Center
Rationale: Azure Security Center assesses the security state and
gives recommendations.
Azure uses ________ to source the IP addresses assigned to its
services and resources.
Correct ANS: Public IP addresses
Rationale: Public IPs are used for addressing resources that need
to be accessible over the Internet.
In an Azure Load Balancer, the ________ layer of operation
distributes incoming traffic across multiple resources.
Correct ANS: Layer 4
Rationale: Azure Load Balancer operates at Layer 4 (Transport
layer) to distribute TCP/UDP traffic.
True/False Questions
©2025
Foundations
Objective Assessment Review (Qns & Ans)
2025
Multiple Choice Questions
What is the purpose of Azure Network Security Groups (NSGs)?
A) Load balancing
B) Firewall configuration
C) Network traffic filtering
©2025
,D) VPN connectivity Correct ANS: C Rationale: NSGs are used
to control inbound and outbound network traffic to Azure
resources.
Which protocol does Azure VPN Gateway primarily use for
establishing secure tunnels?
A) FTP
B) IKEv2
C) HTTP
D) SMTP Correct ANS: B Rationale: Azure VPN Gateway
primarily uses IKEv2 for secure tunnel establishment.
Which Azure service provides distributed denial-of-service
(DDoS) protection?
A) Azure Application Gateway
B) Azure Firewall
C) Azure DDoS Protection
D) Azure Sentinel Correct ANS: C Rationale: Azure DDoS
Protection offers enhanced DDoS attack mitigation.
In the context of Azure Active Directory, what is a conditional
access policy?
A) A method for data encryption
©2025
,B) A rule that grants or restricts access based on certain
conditions
C) A type of OS patch management
D) A mechanism for user authentication Correct ANS: B
Rationale: Conditional access policies determine how users can
access applications based on various conditions.
Which Azure service is specifically designed to manage
encryption keys?
A) Azure Key Vault
B) Azure Blob Storage
C) Azure Active Directory
D) Azure DevOps Correct ANS: A Rationale: Azure Key Vault is
used to manage encryption keys and secrets securely.
Fill-in-the-Blank Questions
Azure offers a service known as ________ to provide secure
connections between on-premises networks and Azure resources.
Correct ANS: VPN Gateway
Rationale: VPN Gateway creates secure site-to-site connections.
The principle of ________ ensures that users have only the
minimum permissions necessary to perform their tasks.
Correct ANS: Least Privilege
©2025
, Rationale: Least privilege is a security best practice in access
management.
In Azure, ________ enables you to define a set of rules that
govern the security posture of your applications.
Correct ANS: Security Center
Rationale: Azure Security Center assesses the security state and
gives recommendations.
Azure uses ________ to source the IP addresses assigned to its
services and resources.
Correct ANS: Public IP addresses
Rationale: Public IPs are used for addressing resources that need
to be accessible over the Internet.
In an Azure Load Balancer, the ________ layer of operation
distributes incoming traffic across multiple resources.
Correct ANS: Layer 4
Rationale: Azure Load Balancer operates at Layer 4 (Transport
layer) to distribute TCP/UDP traffic.
True/False Questions
©2025
