Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ 104 > Azure Virtual Networks > Flashcards

Azure Virtual Networks Flashcards

1
Q

What is an ASG?

A

Azure Application Security Groups allows you to configure the network security as a natural extension of the structure of an application. This allows you to group VMs and define network security policies based on those groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What dose NSG stand for?

A

Network Security Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is an NSG?

A

NSG is a Network Security Group which is used to manage the ingoing and outgoing network traffic to an Azure resources like VMs, Web Applications, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What dose ASG stand for?

A

Application Security Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Vnet Peering

A

This is used to connect different Vnets together

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

How to create subnet using Powershell

A

Net-AzVirtualNetworkSubnetConfig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How to create Vnet using Powershell

A

Net-AzVitualNetwork

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How to create a public ip using Powershell

A

New-AzPublicIpADdress

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How to create network security group using Powershell

A

New-AzNetworkSecurityGroup

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How to create a network security rule using Powershell

A

New-AzNetworkSecurityRuleConfig

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How to create network interface using Powershell

A

New-AzNetworkInterface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is a user-defined routes?

A

User-Defined Routes allow you to define custom routing tables to control the flow of network traffic within your Azure virtual networks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a benefit to having Vnet Service Endpoints

A

This will enhance the security of your Azure Service Resources by securely connecting them to the Vnet. This will also completely remove internet access to the resource, only allowing access via your Vnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is Azure Alerts?

A

Azure Alerts will monitor device status and sent alerts to IT Admins when the alert has been trigged

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is a Azure Load Balancer?

A

This is used to distribute incoming traffic to backend VMs. This operates at layer 4 of the OSI model.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the different components of Azure Load Balancers

A

Azure Load Balancer
Backend VMs
Frontend IP config
Backend pool
Health probe
Load balancing rules

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the two Azure Load Balancer SKU’s

A

Basic Load Balancer
Standard Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the frontend IP config?

A

This is the IP address assigned to the load balancer. If you need load balance from the internet you can use public IP.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is the backend pool?

A

This is the pool of VMs that the load balancers will distribute the traffic accross.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What is the health probe?

A

The health probe is to monitor the backend VMs to make sure they are healthy before the load balancer will send traffic towards it.

19
Q

What are load balancing rules?

A

These are rules used to map the traffic from the user to the backend VMs

20
Q

What are the benefits to using a basic load balancer?

A
  • This can support up to 300 instances in the backend pool
  • The backend VMs can be in an availability set or scale set
  • Health probes can only be TCP or HTTP
  • No SLA
21
Q

What are the benefits to using a standard load balancer?

A
  • This can support up to 1000 instances in the backend pool
  • The backend pool can contain any VM or VM scale set in a Vnet
  • Health probes can only be TCP, HTTP or HTTPs
  • SLA of 99.99%
22
Q

What is a public load balancer?

A

This is a load balancer is getting incoming traffic from the internet using a public IP

23
Q

What is a internal load balancer?

A

This is a load balancer that is getting incoming traffic from within a Vnet using a private IP.

24
Q

What are NAT rules used for?

A

NAT rules are used to allow users to use protocols like RDP into VMs via load balancer

25
Q

What is the Application Gateway Service?

A

Application Gateway is a web traffic load balancer working at the application layer meaning you can have multiple backend pools.

The example below show the application gateway with and image pool and video pool for a website.

26
Q

Azure Application Gateway Service vs Azure Load Balancer

A
  • Azure Load Balancer works at layer 4 of the OSI model
  • Azure Application Gateway Service works at layer 7 of the OSI model
27
Q

How is routing decisions made with Application Gateway?

A

These are made with HTTP request in an URL like paths or host headers. For example www.google.com/images or www.google.com/videos

28
Q

Benefits for Application Gateways?

A
  • SSL/TLS termination which can allow you to configure secure connections to be processed by the application gateway resource.
  • Requests can flow normal to the backend VMs.
  • Reduces the work for the backend VMs.
  • Web application firewall
  • URL-based routing
  • Multiple-site hosting
29
Q

What dose Application Gateway Standard_v2 SKU include?

A
  • Autoscaling which allows the service to scale based on load patters.
  • Zone redundancy to destitute across multiple availability zones for better availability.
30
Q

What does NAT mean in Azure Networking?

A

Network Address Translation

31
Q

What is Azure DNS?

A

This is a hosting service for DNS domains. This helps in providing name resolution by using MS Azure Infrastructure

32
Q

What is the purpose of the Azure DNS service

A

The Azure DNS service is used when

33
Q

What is a DNS Zone?

A

This will represent your domain name in the Azure DNS services

34
Q

What is the Azure Network Watcher service?

A

The service provides a set of tools that can be used to monitor, diagnose, view metrics and logs for resources in an Azure virtual network

35
Q

What are the tools used in the Azure Network Watcher Service?

A

Connection Monitor
IP Flow Verify
Next hop
Packet Capture

36
Q

What is the Connection Monitor tool?

A

This is used to monitor the communications between endpoints
This can be one of the following:
- VM
- Domain Name
- Uniform Resource Identifier (URI)
- IPv4 address

37
Q

What is the IP Flow Verify tool?

A

This is used to check for any communication issues from a VM perspective that might be caused by NSGs

38
Q

What is the Next Hop tool?

A

This can help diagnose any issues when it comes to the routing of traffic from Azure VM. This can tell you what the next hop to a destination from an VM.

39
Q

What is the Packet Capture tool?

A

This can be used to capture the actual network packets sent to and from a VM

40
Q

What is a point to site VPN

A

A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer

41
Q

What are two methods that a user can authenticate to a P2S VPN?

A

Certificate authentication
Microsoft Entra authentication
On-prem RADIUS server

42
Q

What is Certificate authentication (regarding P2S VPN)

A

A client certificate is a trusted root certificate installed on each client computer. Which is is used to authenticate the connecting user.

43
Q

What is Microsoft Entra authentication (regarding P2S VPN)

A

Microsoft Entra authentication allows users to connect to Azure using their Microsoft Entra credentials

44
Q

What is service endpoints

A

A service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network

45
Q

What is required to create a Vnet-to-Vnet VPN between two VNs?

A

Gateway subnet

46
Q

When can a network peering connection can be established?

A

Across different regions, resources groups and even subscriptions

47
Q

What is Azure Virtual Network Service Endpoints?

A

you can add a virtual network rule to secure the Azure service resources to your virtual network

AZ 104 (7 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions