Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-104 > AZ-700: Networking > Flashcards

AZ-700: Networking Flashcards

1
Q

True or False: Virtual Networks cannot span across different regions or different subscriptions

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

True or False: Virtual Networks span across all availability zones in a region

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

True or False: Broadcast and Multicast are supported in an Azure virtual network

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

True or False: IPv6 is always /64 CIDR in Azure Networking

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

True or False: Subnets cannot span availability zones in a region

A

False, they span all of them just like the virtual networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How many IP addresses are “lost” when creating a subnet in Azure

A

5, you lose 1 to network, 1 to default GW, 2 to DNS, and 1 to broadcast

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Where are static IPs configured?

A

They are configured on a per resource level, not vnet.

Examples: done on the VM under its network interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

True or False: you can bring your own individual public IPs into Azure

A

False, Azure has its own set of IPs you need a public ip prefix of atleast /24 to bring it into azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

True or False: you can move Azure public IPs across regions

A

False, Azure IPs are per region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are the two SKUs for a public IP in Azure and what are the differences

A

Basic and Standard

Basic -
-Dynamic or Statically assigned
-Open by Default
-No Availability Zone support

Standard-
-Static only
-locked down by default
-Availability Zone support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

True or False: Load balancers and Public IPs need to have the same SKU tier

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the name for a contiguous block of public IPs

A

Public IP Prefix

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is it called when you connect two unique Vnets in the same region

A

VNET Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is it called when you connect two unique Vnets in different regions

A

Global Vnet Peering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

True or False: you can peer Vnets across different vnet clouds (China, us gov, germany)

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

True or False: 2 unpeered vnets can natively talk if they are peered to the same tertiary vnet

A

False, vnet peering is not transitive, you would have to peer the two vnets together or have an appliance ( such as a firewall) on the tertiary vnet to route traffic between them

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the two settings that need to be enable for a peered vnet to use the other peers gateway and what need to be enable on each

A

Allow gateway transit must be enabled on the “hub” vnet
Use remote gateway must be enabled on the vnet that needs to use the others gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Can you use a remote gateway if there is already a gateway in the vnet

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Can you set the next “hop” in a route table to a different subnet or even network?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Can you connect 2 vnets together without peering them? How would you do it?

A

Yes, with route tables or “user defined routing”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the IP of Azure DNS

A

168.63.129.16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What is an inbuilt option in Azure for custom DNS?

A

Azure private DNS Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

How many private DNS Zones can one Vnet have for registration?

A

1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

How would you be able to have more than one private dns for a vnet?

A

you can have one for registration and multiple (up to 1000) for resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

How many vnets are allowed per private dns zone that use that zone for Auto-registration?

A

100

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

How many vnets are allowed per private dns zone that use that zone for resolution?

A

1000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

what are the two primary types of dns records added to an azure public dns zone

A

host and alias

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the first thing you create while making a STS VPN vnet?

A

Gateway subnet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is needed to configure a point to site VPN that connects to azure ad

A

Add an enterprise app to azure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

When using ExpressRoute all inbound traffic goes through what resource by default?

A

The ExpressRoute Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What is fastpath?

A

Fast Path is a way for inbound traffic to bypass the express route gateway and go straight to a resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Does fast path still require a gateway?

A

Yes, gateways are still required for things like BGP route propagation and it must be the highest SKU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Does outbound express route traffic pass through the gateway?

A

No it goes straight to the MSEE

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

How many vnet links are allowed per expressroute circuit?

A

10 for standard for all circuit sizes and it can be increased with premium add on

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Can you have both microsoft peering and private peering on the same ExpressRoute circuit?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What is required to make microsoft peering “work” once enabled?

A

A route filter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What protocol does a route filter use to advertise services?

A

BGP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

With a stardard ExpressRoute SKU what regions can you use?

A

Any in the same geopolitical region

Ex. North america to north america, asia to asia

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

With a Premium ExpressRoute SKU what regions can you use?

A

All regions (Global)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

Do you pay based on ingress or egress?

A

egress

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What is another name for a “meet me”

A

peering point

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What ExpressRoute SKU provides local region only

A

Local SKU

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What is a faster alternative than having BGP detect a failure and do failover routing

A

BFD or Bidirectional Forwarding Detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What does BFD stand for?

A

Bi-Directional Forwarding Detection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

Is ExpressRoute an encrypted connection?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

What service would you use to encrypt an ExpressRoute-Direct connection inside the meet me

This is between the customer edge router and the MSEE

A

MACsec

This is not end to end, this is inside the meet me only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

What is an option for encrypting an express route connection

A

Site to Site VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

What is the service you would use to connect two sites in different geopolitical regions using expressroute

A

ExpressRoute Global Reach

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is supported by the basic SKU of Azure Virtual WAN

A

S2S VPN only

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What layer is Azure Load Balancer?

A

Layer 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is 5-Tuple

A

source IP address/port number, destination IP address/port number and the protocol in use

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What are the two types of load balancers

A

internal and external

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

What is assigned to the front end of a load balancer

A

IP Address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

What are the two SKUs for a load balancer?

A

Basic and standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

what is a 3-tuple

A

src ip
dest ip
protocol

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What are two of the load balancing distribution modes

A

hash based distribution ( Uses 5-tuple hash based distribution by default)

Session persistence - Session persistence is also known session affinity, source IP affinity, or client IP affinity. This distribution mode uses a two-tuple (source IP and destination IP) or three-tuple (source IP, destination IP, and protocol type) hash to route to backend instances. When using session persistence, connections from the same client go to the same backend instance within the backend pool.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What layer is Azure App Gateway?

A

Layer 7 (HTTP/HTTPS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

Is Azure App Gateway regional or global?

A

regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

Is Azure Load Balancer regional or global?

A

Regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

Can the web application firewall have a public ip, private, or both

Pick Two

A

Public or Both

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What layer is Azure Traffic Manager?

A

Layer 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

Is Azure Traffic Manager regional or global?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

What protocol does Azure Traffic Monitor primarily use?

A

DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
64
Q

What is the setting needed for Azure Traffic Manager to work like a load balancer

A

The performance option will resolve the closest target to the requester favoring latency

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
65
Q

True or False: Azure Traffic Manager can resolve to both Azure Endpoints and External Enpoints such as FQDN or IP

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
66
Q

What is the layer 7, global load balancing solution?

A

Azure Front Door

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
67
Q

How does Azure Front Door provide load balancing

A

it gives an anycast ip address for all points of presence

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
68
Q

What is the name of the tool used to create inbound and outbound security rules for a vnet

A

Network Security Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
69
Q

Is a network security group an edge device

Example: Like a firewall

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
70
Q

Is a network security group an edge device

Example: Like a firewall

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
71
Q

Where is a network security group enforced

A

at the VNET level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
72
Q

Are network security groups regional or global

A

regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
73
Q

What does Virtual Network actually mean when it is applied in a nsg rule

A

It means all know ip space

(this would include peered vnets, S2S VPN, and anything else this virtual network would be “aware” of.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
74
Q

How does an application security group work in practice? What is it most similar to?

A

It is a tag you can use when making security rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
75
Q

What would you use to only allow traffic from one subnet of a vnet into a storage account?

A

A Service Endpoint: Storage

76
Q

What is an ip address from the network that represents a single instance of a service

A

Private endpoint

77
Q

Can each app in an app service plane have its own private endpoint

A

yes

78
Q

What is the minimum network size for Azure Firewall in CIDR

A

/26

it requires at least 64 addresses

79
Q

How many policies can be applied to one instance of azure firewall?

A

1

80
Q

What are the three types of rules for azure firewall

A

NAT rules
L4 Network Rules
Application rules (Layer 7)

81
Q

What is an alias DNS Record called?

A

CNAME

82
Q

What is an IPV4 DNS Record called?

A

A

83
Q

What is an IPV6 DNS Record called?

A

AAAA

84
Q

When configuring global peering, what changes will occur in the peered VNets

A

A peering entry is added to the routing table in each VNet

85
Q

Does a VPN gateway subnet need to be named GatewaySubnet?

A

Yes

86
Q

Is it okay to deploy other resources such as VMs in the gateway subnet?

A

No!!!

87
Q

What are the two things required for your on site VPN device to connect to the Azure VPN Gateway?

A

Shared Key and Public Ip of the Azure VPN Gateway

88
Q

What is the minimum address space to deploy a hub in azure

A

/24

89
Q

What does all traffic pass through in an azure virtual wan?

A

Hub gateway

90
Q

Can you use Virtual WAN to connect a VNet to a virtual hub in a different tenant?

A

Yes

91
Q

Where are NVAs deployed to in a virtual WAN?

A

Inside the Virtual WAN Hub

92
Q

How does the application gateway probe the health of something in its backend pool?

A

a HTTP GET request

93
Q

What is the frequency that azure application gateway probes for health?

A

30 seconds

94
Q

By default, an HTTP(S) response with status code between ___ and ___ is considered healthy for a probe.

A

200 and 399

95
Q

Front Door route rules determine whether the incoming request matches the routing rule and route traffic accordingly. What properties are matched?

A

HTTP protocols (HTTP/HTTPS), Hosts, and Paths.

96
Q

Which tool in Azure automatically collects, analyzes, and integrates log data from your Azure resources?

A

Microsoft Defender for Cloud

97
Q

If there is an NSG on the NIC and an NSG on the subent, what one gets processed first?

A

The one on the NIC

98
Q

Filtering of which direction of traffic does Azure Firewall support?

A

Inbound and Outbound

99
Q

What are the two modes that a WAF policy can use?

A

WAF policy can either be in Prevention mode or Detection mode.

100
Q

What are the two types of custom rule in a WAF policy?

A

Match rules and rate limit rules.

101
Q

To enable a Service Endpoint, you must do two things

A

Turn off public access to the service.
Add the Service Endpoint to a virtual network.

102
Q

What resource is associated with a Private Endpoint that contains the information to configure your Private Endpoint DNS?

A

The network interface

103
Q

What service allows you to view Network Topology, Next Hop, Verify IP Flow, Packet Captures, NSG Flow Logs, and more.

A

Azure Network Watcher

104
Q

Is Azure Network Watcher regional or global?

A

Regional

105
Q

True or False, Automatic registration only works for virtual machine network interfaces and only for the primary interface

A

True

106
Q

True or False, To manage a subdomain in a separate DNS zone, you need to create an PTR record that contains the name servers of the subdomain’s DNS zone.

A

False, it needs to be a NS record not PTR

107
Q

By default, an NSG will block traffic to the health service, what needs to be enabled to use the health service?

A

Adding an inbound rule with the GatewayManager service tag

108
Q

True or false, policy-based VPN gateway can only create one tunnel per gateway

A

True

109
Q

True or False, By default policy-based VPN has an idle timeout of 10 minutes

A

False, The timeout is 5 minutes

110
Q

What is the difference between Azure Front Door, Azure Front Door Standard, and Azure Front Door Premium?

A

Azure Front Door is the basic plan, Azure Front Door standard adds increased content deliver and performance, and Azure Front Door Premium adds increased security

111
Q

You can map a maximum of _____ Private Endpoint interfaces to the same Private Link resource

A

1000

112
Q

Do you need a load balancer for Azure Private Endpoint?

A

Yes

113
Q

Which SKU/s of load balancer work with private endpoint?

A

Only Standard

114
Q

In what order are Azure Firewall rules applied?

A

Threat intelligence>NAT>Network rules>Application>infrastructure rules

115
Q

Which Firewall Manager feature is available only on the secured virtual hub architecture?

A

Centralized route management

116
Q

True or False: You can implement a single instance of Firewall Manager for all Azure regions and subscriptions.

A

True

117
Q

What is the first step when you are setting up Azure DDoS Protection?

A

first step is to associate virtual networks or IP addresses to DDoS Protection

118
Q

Which Azure DDoS Protection service offers DDoS rapid response support?

A

Azure DDoS Network Protection

119
Q

Is a star topology and hub-and-spoke the same thing?

A

Yes

120
Q

Is a virtual WAN a star topology?

A

Yes

121
Q

Is a virtual WAN a spoke and hub topology?

A

Yes

122
Q

Is a virtual WAN a mesh topology?

A

No

123
Q

Is NAT mainly for inbound or outbound connections?

A

Outbound

124
Q

You plan to use Azure Virtual WAN and deploy a virtual WAN hub that meets the following requirements:

Supports 3 Gbps of point-to-site traffic
Minimizes costs.
You need to recommend how many scale units to use.

What should you recommend?

A

Scale units for VPN are in 500 Mbps increments, so to reach 3 Gbps, 6 units are required.

125
Q

You have an Azure subscription.

You deploy an Azure virtual WAN by using the Basic WAN type.

What should you include in the solution?

A

Basic virtual WAN only supports a S2S configuration

126
Q

What are the layer 7 rules for Azure Firewall called

A

Application Rules

127
Q

In a default route what are the first two routes that have the highest priority in order

A

Expressroute then gateway

128
Q

What is the prefix for local non routable ipv6 addresses

A

fd

129
Q

How many ip addresses can be assigned to one network interface

A

256

130
Q

How many S2S VPN connections can each SKU of route-based VPN gateways support?

A

Basic: 10 connections

VpnGw1, VpnGw2, VpnGw3, VpnGw1AZ, VpnGw2AZ, VpnGw3AZ: 30 connections

VpnGw4, VpnGw5, VpnGw4AZ, VpnGw5AZ: 100 connections

131
Q

Which Express Route Gateway SKU supports FastPath?

A

Standard SKU/ERGw1Az FathPath:No Max Number of Circuit Connectionsz:4

High Perf SKU/ERGw2Az FathPath:No Max Number of Circuit Connections:8

Ultra Performance SKU/ErGw3Az FathPath:Yes Max Number of Circuit Connections:16

132
Q

Enabling Direct Server Return (DSR), known in Azure as Floating IP, involves creating what resource

A

It involves creating a loopback adapter on the virtual machine and assigning the loopback adapter the IP address of the frontend listener. This way, the virtual machines knows where to send the traffic back to for session affinity.

133
Q

If HA ports are required, which SKU/type is needed for Load Balancers

A

If HA ports are required, which are only supported on internal Azure Standard Load Balancers

134
Q

What do you get when upgrading from Azure Front Door Standard to Premium

A

Microsoft managed rule set, Bot protection, and Private link connection to origin

135
Q

What is the minimum address space when you use BYOIP?

In CIDR

A

/24

136
Q

What is the main benefit of express route local?

A

Free egress

137
Q

What SKU of expressroute do you need for Microsoft peering?

A

Premium

138
Q

What SKU of expressroute supports any region in the same geopolitical boundary?

A

Expressroute standard

139
Q

What SKU gateway is required for fast path?

A

Ultra performance/ErGw3Az (not high performance, high does not support fastpath)

140
Q

How would you connect two on prem sites with the microsoft backbone via expressroute?

A

Use expressroute global reach

141
Q

What tool shows NSGs associated with the virtual machines and the Network interfaces. This tool shows the NSGs that are in the flow of the traffic and blocks traffic flow.

A

Effective security rules

142
Q

What would be an easy way of allowing a Microsoft service such as windows update through the azure firewall

A

FQDN tag rule

143
Q

A ____ rule allows certain IPs (or all) to have a destination port/ IP.

A

DNAT

144
Q

What do you get with azure firewall premium vs standard

A

Premium gives you: TLS inspection, IDPS, URL filtering, Web categories

URL filtering is full path instead of just the FQDN included in standard

145
Q

What is the key difference between Service Endpoints and NSGs

A

NSGs are more focused towards traffic in and out of a vnet

Service endpints are required to lock down a service to specific subnets on specific vnets

146
Q

What resource allows you to make a specific subnet known to a specific Azure service and add an optimal path to service

A

Service Endpoint

147
Q

True or False

Service Endpoint Policies allow specific instances of services to be allowed from a virtual network which is not possible with NSG service tags

A

True

148
Q

True or False most services have a native firewall

Example: A Storage Account

A

True

149
Q

Do load balancers support auto-registration

A

no

150
Q

Can you use IPsec for azure p2s VPN?

A

No, you can use ikev2, sstp, and openvpn

151
Q

ExpressRoute circuits don’t map to any physical entities. A circuit is uniquely identified by a standard GUID called as a What?

A

service key (s-key).

152
Q

ExpressRoute circuits don’t map to any physical entities. A circuit is uniquely identified by a standard GUID called as a What?

A

service key (s-key).

153
Q

Max. # IPv4 prefixes supported per expressroute private peering

A

4,000 by default and 10,000 with premium

154
Q

Max. # IPv4 prefixes supported per expressroute Microsoft peering

A

200

155
Q

Can a NAT gateway span multiple virtual networks?

A

no

156
Q

Can a NAT gateway be associated to an IPv6 public IP address or IPv6 public IP prefix?

A

no ipv4 only

157
Q

True or False: A NAT gateway can be deployed in a gateway subnet.

A

False

You cannot deploy a NAT gateway in a gateway subnet

158
Q

Can you add network interfaces from different vnets to the same ASG?

A

No.

All network interfaces assigned to an application security group have to exist in the same virtual network that the first network interface assigned to the application security group is in. For example, if the first network interface assigned to an application security group named AsgWeb is in the virtual network named VNet1, then all subsequent network interfaces assigned to ASGWeb must exist in VNet1. You can’t add network interfaces from different virtual networks to the same application security group.

159
Q

What layer is DNS

A

layer 7

160
Q

Which type of vpn gateway does s2s vpn need when coexisting with expressroute

A

Only route-based VPN gateway is supported. You must use a route-based VPN gateway. You also can use a route-based VPN gateway with a VPN connection configured for ‘policy-based traffic selectors’ as described in Connect to multiple policy-based VPN devices.

161
Q

What service enables you to point a private IP to a specific service

Think pointing an ip to specifically the blob service on a storage acct.

A

Private Endpoint

162
Q

Can you have multiple private endpoints for the same instance of a service?

A

Yes

163
Q

Can private enpoints coexist with other resources such as VMs in the same subnet?

A

Yes

164
Q

Can you have multiple private endpoints in the same subnet?

A

Yes

165
Q

True or false: A private endpoint can’t connect to services that aren’t in the same subscription, region, or a AAD Tenant

A

False, private endpoints can connect to all of those

166
Q

True or false: a private endpoint has to be created in the same region as the vnet it will be put in to

A

True, the private endpoint and vnet must be in the same region

167
Q

How many subscriptions can be shared by 1 expressroute circuit?

A

1 expressroute circuit can be part of up to 10 azure subscriptions

168
Q

Does openvpn support ad authentication for a p2s vpn?

A

Yes

169
Q

What do you need to add when you want a private endpoint for a custom service?

A

You need to put a standard load balancer in front of the resources or resource that is hosting the custom service and add the private endpoint to the private endpoint service in front of the load balancer

170
Q

What is a local network gateway in Azure?

A

The local network gateway is a specific object that represents your on-premises location (the site) for routing purposes. You give the site a name by which Azure can refer to it, then specify the IP address of the on-premises VPN device to which you’ll create a connection. You also specify the IP address prefixes that will be routed through the VPN gateway to the VPN device. The address prefixes you specify are the prefixes located on your on-premises network. If your on-premises network changes or you need to change the public IP address for the VPN device, you can easily update the values later.

171
Q

What is the proper url to probe an active/passive gw

A

https://YourVirtualNetworkGatewayIP:8081/healthprobe

172
Q

What is the proper url to probe an active/active gw

A

https://YourVirtualNetworkGatewayIP2:8083/healthprobe

173
Q

True or false: The VPN client must be downloaded again if any changes are made to VNet peering or the network topology.

A

True

174
Q

If you manually create a DNS entry and then delete the resource associated with the DNS record, does it also delete the DNS record?

A

No, only auto-registered DNS records are deleted when a VM is deleted

175
Q

How big are Express Route Scale Units in a virtual WAN?

A

2 Gbps each

176
Q

How big are Express Route Scale Units in a virtual WAN?

A

2 Gbps each

177
Q

Do DNS queries from the internet use the public dns or private?

A

Public

178
Q

When connecting a web application to a vnet in the same region using Regional virtual network integration, what is needed?

A

An additional subnet specifically for Regional virtual network integration

179
Q

Does an azure firewall need to be in the same region and resource group as a vnet

A

Yes

180
Q

How many ips would be in a public ip prefix of /28

A

16 addresses

181
Q

How are the subnet reservations in azure laid out?

A

They are always laid out in the following way
Example:
192.168.1.0 This value identifies the virtual network address.
192.168.1.1 Azure configures this address as the default gateway.
192.168.1.2 and 192.168.1.3 Azure maps these Azure DNS IP addresses to the virtual network space.
192.168.1.255 This value supplies the virtual network broadcast address.

182
Q

When does a dynamic IP address change?

  1. In Azure, when a virtual machine is stopped and then restarted.
  2. In the guest OS, when a virtual machine is rebooted or stopped.
  3. Each time the virtual machine is accessed.
A

1. In Azure, when a virtual machine is stopped and then restarted.

183
Q

What happens to network traffic that doesn’t match any NSG rules?
1. It’s allowed by default.
2. It’s denied by default.
3. It’s postponed until the rules change.

A

2.It’s denied by default.

184
Q

When virtual networks are successfully peered, what’s the peering status for both virtual networks in the peering?

  1. Initiated
  2. Connected
  3. Peered
A

2.Connected

185
Q

True or false: You can implement a public(external) or internal load balancer

A

True

186
Q
A

AZ-104 (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions