exam questions

Exam AZ-140 All Questions

View all questions & answers for the AZ-140 exam

Exam AZ-140 topic 10 question 1 discussion

Actual exam question from Microsoft's AZ-140
Question #: 1
Topic #: 10
[All AZ-140 Questions]

You need to implement network security to meet the security requirements and the performance requirements.
Which two actions should you perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

  • A. Deploy two Azure Firewall instances and Azure Firewall Manager.
  • B. Filter traffic by using outbound rules.
  • C. Filter traffic by using infrastructure rules.
  • D. Filter traffic by using inbound rules.
  • E. Deploy a network security group (NSG) and two application security groups.
  • F. Deploy an Azure Firewall instance and Azure Firewall Manager.
Show Suggested Answer Hide Answer
Suggested Answer: AE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
afbnfz
Highly Voted 2 years, 1 month ago
Selected Answer: AE
I am pretty sure it's A and E because, according to the question, "Each correct answer presents a complete solution." A is a complete solution. You should have one firewall per region. E is the only other complete solution. NSGs give you essentially the same control over inbound/outbound connections to/from Azure resources. None of the others are 'complete'.
upvoted 12 times
...
T10T
Most Recent 8 months ago
Selected Answer: AE
Passed with a 919 on 02/29/2024. This question was on the test. Answers were in different order.
upvoted 1 times
...
ctlearn
1 year, 4 months ago
Selected Answer: AB
You would deploy two Azure Firewall instances (one per region) and then create rules to allow outbound traffic to the AVD control plane and core dependent services. An NSG would be less administrative effort, but it would not work in this case because you would only be deploying one and need two. You can only assign an NSG to a subnet in the region you created it in.
upvoted 1 times
...
Leocan
1 year, 4 months ago
Selected Answer: AE
None of the others are "complete."
upvoted 1 times
...
CertificacionesTEC
1 year, 12 months ago
Got this on exam today Oct-30-2022 Correct AE
upvoted 3 times
...
NotAChatBot
2 years, 7 months ago
B doesn't make sense. Azure firewall will take care of all network and application outbound rules according to security requirements. D might be more useful as you can customize inbound NSG by interface or subnet.
upvoted 3 times
NotAChatBot
2 years, 7 months ago
A is correct as it will decrease latency
upvoted 1 times
...
...
staffo
2 years, 9 months ago
from https://docs.microsoft.com/en-us/azure/firewall/firewall-faq For best performance, deploy one firewall per region.
upvoted 3 times
...
Azreal_75
2 years, 10 months ago
Why would it be A instead of F? Surely a single firewall could have rules to satisfy both requirements?
upvoted 1 times
[Removed]
2 years, 4 months ago
for best performance, deploy one firewall pre region
upvoted 2 times
...
...
Domza
2 years, 11 months ago
Looks good~
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago