Previous

Next

Knowledge check

Completed

Choose the best response for each of the following questions, and then select Check your answers.

1.

Which of the following Firewall Manager features is available only on the secured virtual hub architecture?

Centralized route management

Third-party integration

Centralized deployment and configuration

2.

When Azure Firewall rules are processed, which of the following rules is processed first?

Network rules

Application rules

Threat intelligence rules

3.

An administrator is considering the benefits of Firewall Manager for their organization. The administrator knows that there are resources in several different Azure regions. The organization also has multiple Azure subscriptions. Which of the following statements about this scenario is true?

The administrator must implement multiple instances of Firewall Manager: one for each Azure region.

The administrator must implement multiple instances of Firewall Manager: one for each Azure subscription.

The administrator must implement a single instance of Firewall Manager: one for all Azure regions and subscriptions.

4.

An Azure administrator wants to help secure traffic by using Firewall Manager to create Azure Firewall policies. The traffic originates via an Azure Virtual WAN/ExpressRoute connection from the organization's on-premises environment. Which of the following statements about Firewall Manager is true?

It's not possible to use Firewall Manager to secure traffic in this context.

This example describes Firewall Manager being implemented in the secured virtual hub architecture.

This example describes Firewall Manager being implemented in the hub virtual network architecture.

5.

The Research department requires specific firewall settings to help secure their resources in several Azure virtual networks. But the global administrator wants to ensure that the organization's overarching firewall policies also are applied. Which of the following statements about this configuration is true?

Firewall Manager can't be implemented because the global policies override any local policies.

Firewall Manager can be implemented, because you can configure both global and local policies.

Two instances of Firewall Manager must be implemented to support this requirement.

You must answer all questions before checking your work.

Continue