4.8 Networking in Azure

Question 1

What are the two types of networks in Azure?

A) Public and private networks

B) Azure backbone and Azure VNets

C) Virtual networks and physical networks

D) Standard pass storage accounts and managed services

Answer 1

B) Azure backbone and Azure VNets

Question 2

When do services in Azure use the Azure backbone for communication?

A) When they are connected to a VNet

B) When they are non-VNet-connected services

C) When they are using standard pass storage accounts

D) When they are integrated with managed services

Answer 2

B) When they are non-VNet-connected services

Question 3

What is the purpose of the Azure backbone?

A) To replicate data between storage accounts

B) To provide a fully-managed networking service in Azure

C) To integrate services with managed services

D) To communicate effectively and safely between solution components

Answer 3

Answer: D) To communicate effectively and safely between solution component

Question 4

Which type of networking is a key skill in Azure?

A) Public networking

B) Private networking

C) Networking as a general term

D) Azure backbone networking

Answer 4

C) Networking as a general term

Question 5

What do solution components in Azure need to be able to do?

A) Communicate with each other effectively and safely

B) Replicate data between storage accounts

C) Integrate with non-VNet-connected services

D) Use the Azure backbone for communication

Answer 5

A) Communicate with each other effectively and safely

Question 6

Which Azure service is used to manage and secure the virtual networks in Azure?

A) Azure Firewall

B) Azure Virtual Network

C) Azure Load Balancer

D) Azure VPN Gateway

Answer 6

B) Azure Virtual Network

Question 7

What is the purpose of Azure Load Balancer?

A) To manage and secure virtual networks in Azure

B) To distribute network traffic across multiple VMs

C) To establish a secure connection between on-premises networks and Azure

D) To provide a fully-managed networking service in Azure

Answer 7

B) To distribute network traffic across multiple VMs

Question 8

What is the role of Azure Firewall in networking?

A) To distribute network traffic across multiple VMs

B) To establish a secure connection between on-premises networks and Azure

C) To manage and secure virtual networks in Azure

D) To provide a fully-managed networking service in Azure

Answer 8

C) To manage and secure virtual networks in Azure

Question 9

Which Azure service is used to establish a secure connection between on-premises networks and Azure?

A) Azure Firewall

B) Azure Virtual Network

C) Azure Load Balancer

D) Azure VPN Gateway

Answer 9

D) Azure VPN Gateway

Question 10

What is the purpose of Azure ExpressRoute?

A) To manage and secure virtual networks in Azure

B) To distribute network traffic across multiple VMs

C) To establish a secure connection between on-premises networks and Azure

D) To provide a fully-managed networking service in Azure

Answer 10

C) To establish a secure connection between on-premises networks and Azure

Question 11

What is the purpose of network security groups (NSGs) in Azure?

A) To manage and secure virtual networks

B) To distribute network traffic across multiple VMs

C) To define inbound and outbound rules for traffic flow

D) To establish a secure connection between on-premises networks and Azure

Answer 11

C) To define inbound and outbound rules for traffic flow

Question 12

Why is blocking outbound traffic important in network security?

A) To manage and secure virtual networks

B) To distribute network traffic across multiple VMs

C) To prevent insider threats and unauthorized data exfiltration

D) To establish a secure connection between on-premises networks and Azure

Answer 12

C) To prevent insider threats and unauthorized data exfiltration

Question 13

What is a common use case for network security groups (NSGs)?

A) To manage and secure virtual networks

B) To distribute network traffic across multiple VMs

C) To define inbound and outbound rules for traffic flow

D) To establish a secure connection between on-premises networks and Azure

Answer 13

C) To define inbound and outbound rules for traffic flow

Question 14

What is the first line of defense for network security in Azure?

A) Network security groups (NSGs)

B) Azure Firewall

C) Azure Virtual Network

D) Azure VPN Gateway

Answer 14

A) Network security groups (NSGs)

Question 15

Which component of Azure allows the definition of specific inbound and outbound rules for network traffic?

A) Network security groups (NSGs)

B) Azure Firewall

C) Azure Virtual Network

D) Azure VPN Gateway

Answer 15

A) Network security groups (NSGs)

Question 16

What is the main purpose of Azure Firewall?

A) To manage and secure virtual networks

B) To distribute network traffic across multiple VMs

C) To provide stateful packet inspection and network-level security

D) To establish a secure connection between on-premises networks and Azure

Answer 16

C) To provide stateful packet inspection and network-level security

Question 17

Which feature of Azure Firewall allows for centralized control and cost savings?

A) Application rules

B) Network rules

C) NAT rules

D) Central deployment and peering

Answer 17

D) Central deployment and peering

Question 18

Which deployment methods can be used to install Azure Firewall?

A) Azure portal only

B) PowerShell only

C) REST API only

D) Azure portal, PowerShell, REST API, or templates

Answer 18

D) Azure portal, PowerShell, REST API, or templates

Question 19

Which service can be used to analyze logs generated by Azure Firewall?

A) Azure Monitor

B) Azure Firewall Manager

C) Network Security Groups

D) Azure Virtual Network

Answer 19

A) Azure Monitor

Question 20

How does Azure Firewall differ from other services like NVAs and Application Gateway WAF?

A) It provides stateful packet inspection and network-level security

B) It supports features such as application rules, network rules, and NAT rules

C) It can be centrally deployed and peered with other virtual networks

D) It complements Network Security Groups for better network security

Answer 20

A) It provides stateful packet inspection and network-level security

Question 21

By default, can multiple VNETs in Azure communicate with each other?

A) Yes, they can communicate without any additional configuration

B) No, they cannot communicate by default

C) It depends on the region where the VNETs are located

D) It depends on the size of the VNETs

Answer 21

B) No, they cannot communicate by default

Question 22

When can two VNETs in Azure use the same IP address base?

A) When they are located in the same region

B) When they are of the same size

C) When they never need to communicate with each other

D) When they are connected to physical networks

Answer 22

C) When they never need to communicate with each othe

Question 23

What should you consider when connecting VNETs in Azure?

A) The size of the VNETs

B) The region where the VNETs are located

C) The potential impact on network security

D) The number of subnets within each VNET

Answer 23

C) The potential impact on network security

Question 24

Why should you ensure that VNETs in Azure do not use overlapping address bases?

A) To avoid conflicts between subnets within the same VNET

B) To improve network performance between VNETs

C) To enable communication between VNETs in the same region

D) To prevent network security risks when connecting VNETs

Answer 24

D) To prevent network security risks when connecting VNETs

Question 25

Can VNETs in Azure be located in different regions?

A) Yes, VNETs can be located in different regions

B) No, VNETs must be located in the same region

C) It depends on the size of the VNETs

D) It depends on the number of subnets within each VNET

Answer 25

A) Yes, VNETs can be located in different regions

Question 26

What is the more secure option for controlling traffic to services in Azure?

a) Allowing traffic from any source

b) Controlling traffic from within your local VNET

c) Allowing traffic from specific IP addresses

d) Disabling all traffic to the services

Answer 26

b) Controlling traffic from within your local VNET

Question 27

Which services in Azure can be connected to a VNET using VNET integration?

a) Storage

b) Azure SQL

c) CosmosDB

d) Web apps and function apps

Answer 27

d) Web apps and function apps

Question 28

What must be configured to ensure traffic originates from within your local VNET?

a) Default endpoint settings

b) Local firewall settings

c) Service Endpoints

d) Azure Backbone Network

Answer 28

c) Service Endpoints

Question 29

What do Service Endpoints provide in Azure?

a) Secure access to the internet

b) Direct and secure access from one Azure service to another

c) Access to Azure services through public addresses

d) Secure access to virtual machines connected to a VNET

Answer 29

b) Direct and secure access from one Azure service to another

Question 30

What is the default behavior for communication to the default endpoint in Azure?

a) Traffic originates from within the local VNET

b) Traffic originates from any source

c) Traffic originates from specific IP addresses

d) Traffic originates from the public address

Answer 30

d) Traffic originates from the public address

Question 31

Scenario: I’ve got two servers I’ve built in Azure.

The first is a Linux server here, which is running Apache. It does not have a public IP address, but it has a private IP address. This is running on a VNET called VNET-2 on a default subnet.

I have another server, which is a Windows virtual machine that I’m currently working on. It is running on a different VNET, VNET-1, compared to the Linux server. The Windows server has a private IP range and its IP address is slightly different from the Apache server. The Apache server is on 10.1.0.4 while the Windows server is on 10.0.0.4. Although the Windows server has a public IP address, it is only used for me to connect to it.

I have a Linux server running Apache on VNET-2 with a private IP. My Windows virtual machine is on VNET-1 with a different IP range, and has a public IP.

The virtual machine running Linux is on Apache and the default website. I’m remotely accessing Windows 11 through a virtual machine on Azure. But browsing to the address won’t work since communication between VNETs is not automatic. We’ll fix that by adding a new peering in the VNET-1.

Let’s name our network VNET1-VNET2 and accept the default settings. We’re creating a standard point-to-point connection, so we’ll need to specify that this gateway is VNET2 to VNET1. Next, we can add the remote VNET, which is VNET-2. After connecting, we can test connectivity by pinging the other IP address using the command prompt. If we receive a reply, we’re all set.

A web server issue may be caused by a network security group blocking traffic. We can fix this by checking port rules, deleting blocking traffic rules, and reverting to the default rule set. After that, we should refresh the server and test the communication.

We can’t access the image folder in our storage account because we have restricted traffic from specific virtual networks and IPs. To resolve this, we can add the virtual network “traffic VNET-1” from where our virtual machine is running. Once we save these changes, we need to wait for them to take effect and then we can access the image.

If we try to access this from a public endpoint, we won’t be able to because of the service endpoint rule we’ve created.

These are two important things to remember when building and configuring networks in Azure. Using service endpoints with VNET integration is a great way to ensure traffic only comes from internal services. Peering is a great way to build HubSpot model networks easily and quickly.

Question 32

In the given scenario, which server is running Apache?

a) Linux server on VNET-2

b) Windows virtual machine on VNET-1

c) Both servers are running Apache

d) None of the servers are running Apache

Answer 32

a) Linux server on VNET-2

Question 33

What is the purpose of the public IP address on the Windows virtual machine?

a) To connect to the Linux server

b) To connect to the internet

c) To establish a secure connection

d) To communicate with other virtual machines

Answer 33

b) To connect to the internet

Question 34

Which network is the Windows virtual machine running on?

a) VNET-2

b) Default subnet

c) VNET-1

d) None of the above

Answer 34

c) VNET-1

Question 35

What is the IP address of the Linux server?

a) 10.0.0.4

b) 10.1.0.4

c) 10.0.0.1

d) 10.1.0.1

Answer 35

b) 10.1.0.4

Question 36

What are the topics covered in the course “Microsoft Azure Solutions Architect Expert (AZ-305) Cert Prep: 4 Design Infrastructure Solutions”?

a) Routing, peering, and network security groups

b) Azure administration and development

c) Azure data storage solutions

d) Azure identity and governance solutions

Answer 36

a) Routing, peering, and network security groups.