For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAzure Solutions Architect Expert (AZ-305)Azure Solutions Architect Expert AZ-305 Practice Exam 6Question 55
    Medium1 markMultiple Choice
    Domain 4.4: Network SolutionsDomain 4.4Front DoorWAF
    This question is part of a case study — click to read the full scenario(Case 51)

    CASE STUDY: Contoso Ltd is a global financial services firm with 10,000 employees. They have a primary on-premises data center in London and a secondary in New York. They are migrating to Azure and require a hub-and-spoke network topology. Requirements: 1) Secure connectivity between on-premises and Azure with at least 5 Gbps throughput and redundancy. 2) Centralized inspection of all outbound internet traffic from spoke VNets. 3) Spoke VNets must communicate with each other securely. 4) PaaS services (Storage, SQL) must be accessed privately without traversing the public internet. 5) Web applications in spokes require WAF protection and global load balancing.

    Question 1 of 5: To meet Requirement 1 (Secure connectivity with at least 5 Gbps throughput and redundancy), which hybrid connectivity solution should you recommend?

    View full case study page →

    AZ-305 · Question 55 · Domain 4.4: Network Solutions

    CASE STUDY: Contoso Ltd is a global financial services firm with 10,000 employees. They have a primary on-premises data center in London and a secondary in New York. They are migrating to Azure and require a hub-and-spoke network topology. Requirements: 1) Secure connectivity between on-premises and Azure with at least 5 Gbps throughput and redundancy. 2) Centralized inspection of all outbound internet traffic from spoke VNets. 3) Spoke VNets must communicate with each other securely. 4) PaaS services (Storage, SQL) must be accessed privately without traversing the public internet. 5) Web applications in spokes require WAF protection and global load balancing.

    Question 5 of 5: To meet Requirement 5 (WAF protection and global load balancing for web apps), which service should you deploy?

    Answer options:

    A.

    Azure Application Gateway.

    B.

    Azure Traffic Manager.

    C.

    Azure Front Door.

    D.

    Azure Load Balancer.

    How to approach this question

    Identify the service that combines global routing with Layer 7 security.

    Full Answer

    C.Azure Front Door.✓ Correct
    Azure Front Door is a global, Layer 7 load balancer that provides fast, reliable, and secure access to your web applications. It natively integrates with Azure Web Application Firewall (WAF) to protect against common exploits.

    Common mistakes

    Choosing Application Gateway, missing the 'global' requirement.
    Question 54All questions

    Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 6

    55 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01Contoso Ltd is a global manufacturing company with 50,000 employees. They operate a mix of on-pre...MediumQ02A financial institution has 500 Windows Server VMs on-premises and 200 VMs in Azure. They need to...HardQ03An enterprise uses Azure Sentinel and Log Analytics. They ingest 500 GB of logs daily. The IT bud...HardQ04You are designing a monitoring strategy for a new Azure deployment consisting of App Service, Azu...EasyQ05A healthcare company uses Microsoft Entra ID (Azure AD). They need to implement a security policy...Medium
    View all 55 questions →