Network Diagram PBQs: Designing and Implementing Microsoft Azure Networking Solutions (AZ-700)

easy

Question 1 of 3

You are an Azure network engineer deploying a basic hub-and-spoke VNet topology. The Hub VNet provides centralized connectivity services. Spoke A VNet hosts web application workloads. The DMZ Subnet within the hub handles internet-facing traffic inspection. An Azure Firewall and a VNet Gateway are already in place. Assign the remaining Azure networking resources to the correct VNet or subnet based on standard hub-spoke design patterns.

Network Topology

Hub VNet

Centralized services — Azure Firewall, VNet Gateway, Bastion

Azure Firewall🔒

VNet Gateway🔒

Spoke A VNet

Web application workloads, App Service, VMs

Drop devices here

DMZ Subnet

Internet-facing resources — Application Gateway, public IPs

Drop devices here

Available Devices

Drag devices into the correct network zone above

Azure Bastion

Application Gateway

Web Server VM

Progress

0 of 3 devices placed

Drag devices into the correct network zones

0 of 3 marked complete