Microsoft Azure Security Engineer Associate AZ-500 Practice Question

You manage a 10-Gbps ExpressRoute Direct circuit that carries both private and Microsoft peering traffic between your on-premises datacenter and multiple Azure virtual networks. A new compliance rule requires that every frame traversing the physical circuit be encrypted, but the networking team does not want to deploy additional VPN gateways or change existing routing. Which feature should you use to satisfy the requirement?

  • Attach an Azure VPN gateway to the circuit and enable IPsec encryption.

  • Configure every Azure workload to require TLS 1.2 connections.

  • Enable MACsec on the ExpressRoute Direct ports.

  • Turn on ExpressRoute FastPath for the virtual network connections.

Microsoft Azure Security Engineer Associate AZ-500
Secure networking
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot