04-Virtual Networking Flashcards

1
Q

What are Azure Networking Components?

A

Virtual Network

Load Balancer

Application Gateway

Traffic Manager profile

Virtual network gateway

Virtual WAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Virtual Network

A

Logically isolated section in MS Azure and securely connect it outward

Logical representation of your own network

Create dedicated private cloud-only virtual network

Securely extend your datacenter with virtual networks

Enable hybrid cloud scenarios

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is Load Balancer

A

Distributes incoming traffic among backend virtual machine instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is Application Gateway

A

Scalable layer-7 load balancer offering various traffic routing rules and SSL termination for backend

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Traffic Manager profile

A

Allows you to control the distribution of user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is Virtual network gateway

A

VPN device in your Azure virtual network and used with site-to-site and VNet-to-VNet VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is Virtual WAN

A

Networking service that provides optimized and automated branch-to-branch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are Subnets

A

Logical division within your network

Virtual network can be segmented into one or more subnets

Helps improve security, increase performance, and make it easer to manage the network

Must have unique address range - cannot overlap with other subnets in the virtual network in the subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Private IP Address

A

Used within an Azure virtual network (VNet) and your on-prem network when you use VPN gateway or ExpressRoute circuit to extend your network to Azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is Public IP Address

A

Used for communication with the Internet, including Azure public-facing services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Where can you associate Public IP Address

A

Virtual Machine - NIC

Load Balancer - Front-end configuration (Internet-facing)

VPN Gateway - Gateway IP configuration

Application Gateway - Front-end configuration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can you associate Private IP Address

A

Virtual Machine

Internal Load Balancer

Application Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Static IP

A

FILL IN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is Dynamic IP

A

FILL IN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is Network Security Group

A

Lists the security rules that ALLOW or DENY inbound or outbound network traffic

Limits network traffic to resources in a virtual network

Associated to a subnet or a network interface

Can be associated multiple times

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are Network Security Group (NSG) Rules

A

Enable you to filter network traffic that can flow in and out of virtual network subnets and network interfaces

There are default security rules. You cannot delete the default rules, but you can add other rules with a higher priority

Lower the number, Higher the priority

17
Q

What are NSG Effective Rules

A

Evaluated independently for the subnet and NIC

“allow” rule must exist at both levels for traffic to be admitted

Use the Effective Rules link if you are not sure which security rules are being applied

18
Q

How to create NSG rules

A

Specify

Service - destination protocol and port range for this rule

Port ranges - single port or multiple ports

Priority - lower the number, higher the priority

19
Q

What is Azure Firewall

A

Fully stateful firewall as a service

Built-in high available with unrestricted cloud scalability

Create, enforce, log application and network connectivity policies

Threat intelligence-based filtering

Fully integrated with Azure Monitoring for logging and analytics

Support for hybrid connectivity through deployment behind VPN and ExpressRoute Gateways

20
Q

How you implement firewall

A

Hub-and-spoke topology is recommended

Shared services are placed in the hub virtual network

Each environment is deployed to a spoke to maintain isolation

21
Q

What are NAT rules

A

Translate Public IP address to Private IP address

22
Q

What are Network rules

A

Allow HTTP and non-HTTP traffic.

Configure rules that contain src addr, prototols, dst ports and dst addresses.

23
Q

What are Application rules

A

Configure fully qualified domain names (FQNDs) that can be accessed from a subnet

24
Q

When is Azure AD domain created

A

When you create Azure subscription then an Azure AD domain is created for you

Initial domain name in the form domainname.onmicrosoft.com

You can customize/change the name

After custom name is added it must be verified

25
Q

Verify the Custom Domain Name does what?

A

Demonstrates ownership of the domain name

Adds a DNS record (MX or TXT) that is provided by Azure into your company’s DNS zone

Azure will query the DNS domain for the presence of the record

Can take several minutes or several hours

26
Q

Azure DNS Zones

A

DNS zone hosts the DNS records for a domain

Name of zone must be unique within the resource group

Where multiple zones share the same name, each instance is assigned different name server address

Root/Parent domain is registered at the registrar and pointed to Azure NS

27
Q

What is NS

A

Name Server, i.e. where DNS records exist

28
Q

What is DNS Delegation

A

When delegating a domain to Azure DNS, you must use the name server names provided by Azure DNS - use all four

Once DNS zone is created, update the parent registrar

For child zones, register the NS records in the parent domain

29
Q

What is DNS Records Set

A

Collection of records in a zone that have the same name are are the same type

Can add up to 20 records to any record set

Record set cannot contain two identical records

Changing the drop-down Type changes the information required

30
Q

DNS for Private Domains

A

Use your own custom domain names

Provides name resolutions for VMs within a VNet and between VNets

Automatic hostname record management

Removes the need for custom DNS solutions

Use all common DNS record types

Available in all Azure regions