Configure and Manage Virtual Networking Flashcards

1
Q

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.0

What is this reserved for ?

A

the Network address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.255

What is this reserved for ?

A

the network broadcast address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.1

What is this reserved for ?

A

the default gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.2 and x.x.x.3

What are these reserved for ?

A

mapping the Azure DNS IPs to the VNET space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a default gateway ?

A

The IP address for the router that connects your network to other network segments, serving as an exit point for all packets that have a destination outside your network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

When you create and configure new IP addresses, what are the three dimensions you must define ?

A

Public or private
Static assignment or dynamic assignment
IPV4 or IPV6 or both

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

[Private IP addresses]

The infrastructure team has implemented firewall rules to deny traffic based on IP address ranges.

Which of the following should be used to meet the requirement?

  • Statically assigned IP addresses
  • Dynamically assigned IP addresses
A

Statically assigned IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

[Peering]

When 2 VNETs are peered, traffic is routed through …

  • public internet
  • public internet with a VPN gateway
  • Microsoft’s infrastructure backbone
A

Microsoft’s infrastructure backbone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

[Peering]

What is the difference between regular peering and global peering ?

A

Regular peering is when the two peered VNETs are in the same region

Global peering is when the two peered VNETs are in different regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

[Peering]

A single VNET can span …

  • regions
  • subscriptions
  • both
  • neither regions nor subscriptions
A

neither regions nor subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

[Peering]

True or false : Ingressing and egressing data is more expensive in global peering

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

[Peering]

What is the most important rule to remember when establishing the peering relationship between two VNETs ?

A

The two VNETs can not have overlapping address space

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

[Peering]

True or false : Once two VNETs are peered, you can modify their address space

A

False - address space can not be modified once a VNET is peered with another

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

[Peering]

True or false : address space can not be modified once a VNET is peered with another VNET

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

[Peering]

What is the maximum number of peering connections per VNET ?
Is this a hard limit or can this be changed ?

A

500 peering connections per VNET

It is hard limit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

[Peering]

What does UDR stand for ?

A

User Defined Routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

[Peering]

VNet peering is not _____________________ . This means there is no automatic connectivity between spokes in a hub-and-spoke topology.

A

transitive

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

[Peering]

…deploy an NVA into the hub through user-defned routes (UDRs) to route inter-spoke traffc through the NVA.

This is known as ___________________ , and it enables spoke-to-spoke communication without requiring additional VNet peerings.

A

service chaining

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

[Peering]

What is the simplest way to do spoke-to-spoke communication without doing too many VNET peerings ?

A

service chaining

20
Q

[Peering]

NVA stands for … ?

A

Network Virtual Appliance

21
Q

[Peering]

In an hub-and-spoke architecture, where several VNETs are all peered to a hub, you’ve decided to use service chaining to avoid creating too many peering relationships.

What are the two major characteristics of “service chaining” ?

A
  1. Deploy an NVA to the Hub

2. Use UDR to route inter-spoke traffic through the NVA

22
Q

[Peering]

To transit traffic from one spoke VNet to another spoke VNet via an NVA in the hub VNet, the VNet peerings must be confgured correctly.

By default, a peering connection will only accept traffic originating from the VNet to which it is connected.

However, this will not be the case for traffic forwarded between spoke VNets via an NVA in a hub VNet.

To permit such traffic, the ________________________ setting must be enabled for those VNet peerings.

A

Allow Forwarded Traffic

23
Q

[Peering]

Suppose you want two peered VNets want to send traffic to an external network via a virtual network gateway.

Rather than deploy two virtual network gateways, what is simpler and more cost-efficient set up for the VNets ?

A

Have them share a single network gateway

24
Q

[Peering]

“Use Remote Gateways” setting is enabled for a VNet.

Can this VNet have its own network gateway ?

A

No

25
Q

[Peering]

You need to inform a VNet-B of the presence of a gateway in VNet-A.

Which setting should you enable in VNet-B ?

A

Enable the setting “Use Remote Gateway” in VNet-B

26
Q

[Peering]

Suppose the virtual network gateway is deployed to VNet-A, allowing VNet-A to communicate with the external network.

VNet-B has enabled the setting “Use Remote Gateway” and there is a peering between VNet-A and Vnet-B.

What setting must you enable in VNet-A to allow VNet-B to use VNet-A’s virtual network gateway ?

A

You must enable the “Allow Gateway Transit” setting

27
Q

[Private IP addresses]

What do VMs use to connect to a network or to the internet ?

A

A network interface card (NIC)

28
Q

[Private IP addresses]

…………………………… is a stand alone Azure resource, whose only purpose is to provide connectivity for VMs. It is thus typically deleted with its corresponding VM.

A

A network interface card

29
Q

[Private IP addresses]

A VM acting as an NVA will typically have …

  • 1 NIC
  • Many NICs
A

Many NICs

30
Q

[Private IP addresses]

True or false : A VM can only have one single NIC

A

False, a VM can have multiple NICs. This is often the case for VMs that are used as NVAs.

31
Q

[Private IP addresses]

The IP configurations for a VM are stored where ?

A

In the NIC

32
Q

[Private IP addresses]

True or false : A single NIC can have multiple IP configurations

A

True

33
Q

[Private IP addresses]

True or false : Private IP adresses are a separate resource from the NIC

A

False

34
Q

[Private IP addresses]

True or false : Private IP adresses are not a separate resource from the NIC

A

True

35
Q

[Private IP addresses]

What two things does an IP configuration specify ?

A

1 . a specific subnet

  1. an IP address allocated from that specific subnet
36
Q

[Private IP addresses]

What does DHCP stand for ?

A

Dynamic Host Configuration Protocol

37
Q

[Private IP addresses]

What are the two methods of assigning private IP addresses ?

Which one is the default method ?

A
  1. Dynamic
  2. Static

Dynamic is default

38
Q

[Private IP addresses]

What does Azure use to dynamically allocate private IP addresses ?

A

the Azure DHCP server

39
Q

[Private IP addresses]

In the subnet 10.10.0.0/24, you deploy a VM with dynamic IP address allocation.

Azure DHCP allocates 10.10.0.4

Why ?

A

It allocated the lowest available IP, and the first 4 are always reserved for the Azure platform

40
Q

[Private IP addresses]

When does a dynamically allocated IP address change ?

A

When you stop and restart a VM

41
Q

[Private IP addresses]

At what level is the IP address allocation method configuration (dynamic/static) specified ?

  • the VM
  • the NIC
  • the IP configuration
  • the subnet and IP address
A

the IP configuration

42
Q

[Private IP addresses]

You have a VM that is also going to serve as a domain controller.

Which of the following should be used to meet the requirement?

  • Statically assigned IP addresses
  • Dynamically assigned IP addresses
A

Statically assigned IP addresses

43
Q

[Private IP addresses]

Certain resources are going to be accessed through an IP address and not a domain name.

Which of the following should be used to meet the requirement?

  • Statically assigned IP addresses
  • Dynamically assigned IP addresses
A

Statically assigned IP addresses

44
Q

[Private IP addresses]

Static private IP addresses should only be configured in the Azure network interface resource.

They will be assigned to the virtual machine using ………………………. , just like with dynamic private IP addresses.

A

DHCP

45
Q

[Private IP addresses]

Private IPv6 addresses can be assigned …

  • only dynamically
  • only statically
  • dynamically or statically
A

only dynamically

46
Q

[Private IP addresses]

Private IPv4 addresses can be assigned …

  • only dynamically
  • only statically
  • dynamically or statically
A

dynamically or statically