Configure and Manage Virtual Networking Flashcards by Alexander Kao

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.0

What is this reserved for ?

the Network address

How well did you know this?

Not at all

Perfectly

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.255

What is this reserved for ?

the network broadcast address

How well did you know this?

Not at all

Perfectly

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.1

What is this reserved for ?

the default gateway

How well did you know this?

Not at all

Perfectly

Azure reserves 5 IP addresses with each subnet

subnet
x.x.x.2 and x.x.x.3

What are these reserved for ?

mapping the Azure DNS IPs to the VNET space

How well did you know this?

Not at all

Perfectly

What is a default gateway ?

The IP address for the router that connects your network to other network segments, serving as an exit point for all packets that have a destination outside your network

How well did you know this?

Not at all

Perfectly

When you create and configure new IP addresses, what are the three dimensions you must define ?

Public or private
Static assignment or dynamic assignment
IPV4 or IPV6 or both

How well did you know this?

Not at all

Perfectly

[Private IP addresses]

The infrastructure team has implemented firewall rules to deny traffic based on IP address ranges.

Which of the following should be used to meet the requirement?

Statically assigned IP addresses
Dynamically assigned IP addresses

Statically assigned IP addresses

How well did you know this?

Not at all

Perfectly

[Peering]

When 2 VNETs are peered, traffic is routed through …

public internet
public internet with a VPN gateway
Microsoft’s infrastructure backbone

Microsoft’s infrastructure backbone

How well did you know this?

Not at all

Perfectly

[Peering]

What is the difference between regular peering and global peering ?

Regular peering is when the two peered VNETs are in the same region

Global peering is when the two peered VNETs are in different regions

How well did you know this?

Not at all

Perfectly

[Peering]

A single VNET can span …

regions
subscriptions
both
neither regions nor subscriptions

neither regions nor subscriptions

How well did you know this?

Not at all

Perfectly

[Peering]

True or false : Ingressing and egressing data is more expensive in global peering

True

How well did you know this?

Not at all

Perfectly

[Peering]

What is the most important rule to remember when establishing the peering relationship between two VNETs ?

The two VNETs can not have overlapping address space

How well did you know this?

Not at all

Perfectly

[Peering]

True or false : Once two VNETs are peered, you can modify their address space

False - address space can not be modified once a VNET is peered with another

How well did you know this?

Not at all

Perfectly

[Peering]

True or false : address space can not be modified once a VNET is peered with another VNET

True

How well did you know this?

Not at all

Perfectly

[Peering]

What is the maximum number of peering connections per VNET ?
Is this a hard limit or can this be changed ?

500 peering connections per VNET

It is hard limit

How well did you know this?

Not at all

Perfectly

[Peering]

What does UDR stand for ?

User Defined Routing

How well did you know this?

Not at all

Perfectly

[Peering]

VNet peering is not _____________________ . This means there is no automatic connectivity between spokes in a hub-and-spoke topology.

transitive

How well did you know this?

Not at all

Perfectly

[Peering]

…deploy an NVA into the hub through user-defned routes (UDRs) to route inter-spoke traffc through the NVA.

This is known as ___________________ , and it enables spoke-to-spoke communication without requiring additional VNet peerings.

service chaining

How well did you know this?

Not at all

Perfectly

[Peering]

What is the simplest way to do spoke-to-spoke communication without doing too many VNET peerings ?

service chaining

[Peering]

NVA stands for … ?

Network Virtual Appliance

[Peering]

In an hub-and-spoke architecture, where several VNETs are all peered to a hub, you’ve decided to use service chaining to avoid creating too many peering relationships.

What are the two major characteristics of “service chaining” ?

Deploy an NVA to the Hub

2. Use UDR to route inter-spoke traffic through the NVA

[Peering]

To transit traffic from one spoke VNet to another spoke VNet via an NVA in the hub VNet, the VNet peerings must be confgured correctly.

By default, a peering connection will only accept traffic originating from the VNet to which it is connected.

However, this will not be the case for traffic forwarded between spoke VNets via an NVA in a hub VNet.

To permit such traffic, the ________________________ setting must be enabled for those VNet peerings.

Allow Forwarded Traffic

[Peering]

Suppose you want two peered VNets want to send traffic to an external network via a virtual network gateway.

Rather than deploy two virtual network gateways, what is simpler and more cost-efficient set up for the VNets ?

Have them share a single network gateway

[Peering]

“Use Remote Gateways” setting is enabled for a VNet.

Can this VNet have its own network gateway ?

[Peering] You need to inform a VNet-B of the presence of a gateway in VNet-A. Which setting should you enable in VNet-B ?

Enable the setting "Use Remote Gateway" in VNet-B

[Peering] Suppose the virtual network gateway is deployed to VNet-A, allowing VNet-A to communicate with the external network. VNet-B has enabled the setting "Use Remote Gateway" and there is a peering between VNet-A and Vnet-B. What setting must you enable in VNet-A to allow VNet-B to use VNet-A's virtual network gateway ?

You must enable the "Allow Gateway Transit" setting

[Private IP addresses] What do VMs use to connect to a network or to the internet ?

A network interface card (NIC)

[Private IP addresses] ................................. is a stand alone Azure resource, whose only purpose is to provide connectivity for VMs. It is thus typically deleted with its corresponding VM.

A network interface card

[Private IP addresses] A VM acting as an NVA will typically have ... - 1 NIC - Many NICs

Many NICs

[Private IP addresses] True or false : A VM can only have one single NIC

False, a VM can have multiple NICs. This is often the case for VMs that are used as NVAs.

[Private IP addresses] The IP configurations for a VM are stored where ?

In the NIC

[Private IP addresses] True or false : A single NIC can have multiple IP configurations

True

[Private IP addresses] True or false : Private IP adresses are a separate resource from the NIC

False

[Private IP addresses] True or false : Private IP adresses are not a separate resource from the NIC

True

[Private IP addresses] What two things does an IP configuration specify ?

1 . a specific subnet 2. an IP address allocated from that specific subnet

[Private IP addresses] What does DHCP stand for ?

Dynamic Host Configuration Protocol

[Private IP addresses] What are the two methods of assigning private IP addresses ? Which one is the default method ?

1. Dynamic 2. Static Dynamic is default

[Private IP addresses] What does Azure use to dynamically allocate private IP addresses ?

the Azure DHCP server

[Private IP addresses] In the subnet 10.10.0.0/24, you deploy a VM with dynamic IP address allocation. Azure DHCP allocates 10.10.0.4 Why ?

It allocated the lowest available IP, and the first 4 are always reserved for the Azure platform

[Private IP addresses] When does a dynamically allocated IP address change ?

When you stop and restart a VM

[Private IP addresses] At what level is the IP address allocation method configuration (dynamic/static) specified ? - the VM - the NIC - the IP configuration - the subnet and IP address

the IP configuration

[Private IP addresses] You have a VM that is also going to serve as a domain controller. Which of the following should be used to meet the requirement? - Statically assigned IP addresses - Dynamically assigned IP addresses

Statically assigned IP addresses

[Private IP addresses] Certain resources are going to be accessed through an IP address and not a domain name. Which of the following should be used to meet the requirement? - Statically assigned IP addresses - Dynamically assigned IP addresses

Statically assigned IP addresses

[Private IP addresses] Static private IP addresses should only be configured in the Azure network interface resource. They will be assigned to the virtual machine using ............................ , just like with dynamic private IP addresses.

DHCP

[Private IP addresses] Private IPv6 addresses can be assigned ... - only dynamically - only statically - dynamically or statically

only dynamically

[Private IP addresses] Private IPv4 addresses can be assigned ... - only dynamically - only statically - dynamically or statically

dynamically or statically