Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Mikes AZ104 > Implement and Manage Virtual Networking > Flashcards

Implement and Manage Virtual Networking Flashcards

Configure and managed VNets, Secure access to VNets, Name resolution and load balancing

1
Q

What is Session persistence: Client IP?

A

in load balancer context you can achieve clients talking to the same backend server via Session persistence. It is also known session affinity, source IP affinity, or client IP affinity. This distribution mode uses a two-tuple (source IP and destination IP) or three-tuple (source IP, destination IP, and protocol type) hash to route to backend instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is a public DNS Zone?

A

A public DNS zone is a portion of the global Domain Name System (DNS) that is visible and accessible to the public. It contains information about domain names and their corresponding IP addresses, allowing users to access websites and other internet resources using human-readable domain names. Public DNS zones are managed by domain registrars, hosting providers, and other organizations responsible for maintaining the DNS infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a VPN Gateway?

A

A type of networking device that allows secure communication between an Azure virtual network and an on-premises network or another virtual network. It provides a way to establish encrypted connections over the internet, enabling secure and private communication between different network environments.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is a site to site VPN?

A

a type of VPN connection that enables secure communication between two or more geographically dispersed networks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is a point to site VPN?

A

a type of VPN connection that allows individual client devices, such as laptops, desktops, or mobile devices, to securely connect to a remote network over the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the difference between point to site and point to site VPN services?

A

Unlike site-to-site VPNs, which connect entire networks, point-to-site VPNs establish encrypted connections between individual client devices and a central network or virtual network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

When do you have to re-download and re-install the VPN Configuration when using a point to site VPN service?

A

Whenever there is a change in network topology.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the difference between private/internal and public load balancer?

A

Private/internal load balancers distribute traffic to resources inside of a virtual network. Public balances public traffic to your virtual machines.

Internal load balancers distribute traffic within a VNET while public load balancers balance traffic to and from an internet-connected endpoint.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is WAF and what kind of application gateway supports it?

A

WAF=Web Application Firewall

a security feature that can be integrated with a load balancer to protect web applications from various types of cyber threats and attacks, such as SQL injection.

Application Gateway WAF Tier supports it, Standard tier does not.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is azure application gateway?

A

A web traffic load balancer that enables you to manage traffic to your web applications. For example, you can route traffic based on the incoming URL. So if /images are in the incoming URL, you can route traffic to a specific set of servers (known as a pool) configured for images. If /video is in the URL, that traffic is routed to another pool that’s optimized for videos.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Can VNet peering work across Microsoft Entra Tenants?

A

Yes! This is because the networks are both within Azure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the two ways you can connect two virtual networks?

A

VNet Peering & VPN Gateways
Peering = Connecting two networks in Azure, with low latency (few hops) and does not involve the public internet
Gateways= values encryption due to use over public internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When deploying connecting an on premise network to an azure vnet/subnet, what is the order of steps to take?

A

1) Deploy a gateway subnet -> required to configure VNet Gateway (step 2)
2) Deploy a VPN Gateway in Azure
3) Deploy a local network gateway
4) Deploy VPN to link azure and local gateways

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the differences between the standard load balancer and the basic load balancer?

A

https://media.tutorialsdojo.com/BasicLoadBalancer.PNG

Backend:
- pool size
- pool endpoints
- health probe protocols & down behavior
- availability zones
- …

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is DNS Zone file import? And what azure utilities support it?

A

A DNS zone file is a text file that contains details of every Domain Name System (DNS) record in the zone. This can be imported to Azure via the CLI and portal.

Powershell and cloud shell don’t support this import.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the gateway transit setting in VNet Peering?

A

a peering property that lets one virtual network use the VPN gateway in the peered virtual network for cross-premises or VNet-to-VNet connectivity.

When the gateway transit setting is enabled for a VNet peering connection, it allows the peered virtual network to forward traffic through its VPN gateway to on-premises networks or other external networks

16
Q

If a VNet peering connection becomes disconnected, what must you do? What would cause this?

A

You must delete the peering configuration and re-create it.

Many reasons like netowrk changes (eg. ip addresses, routing issues, resource deletion).

17
Q

What types of application gateways are there?

A

Standard & WAF Tier

18
Q

What types of Azure Front Door is there?

A

Standard & Premium

19
Q
A
20
Q

What is the purpose of a subnet mask?

A

Indicates what part of a TCP/IP Packet indicates the network, and which part indicates the host identifier

21
Q

What is the mask of /24?
What about /16?

A

It is the left most
/24 bits -> 255.255.255.0
/24 bits -> 255.255.0.0

22
Q

What is Azure private DNS?

A

It managed and resolves domain names in a virtual network without the need to configure a custom DNS solution.

Virtual networks must be linked to the private DNS zone.

23
Q

What is auto-registration and what azure service does it apply to?

A

It applies to Azure private DNS, and automatically updates DNS records whenver a VM in a VNet is created, updates its IP, or is deleted.

24
Q

Can Public DNS Zones be linked to VNets?

A

No, you can not use public DNS zones as they do not have the capability to use virtual network links

25
Q

What are the different DNS Record types?

A

A (Address) Record: Maps a domain name to the IPv4 address of the server hosting the domain.
AAAA (IPv6 Address) Record: Similar to the A record, but maps a domain name to the IPv6 address of the server hosting the domain.
NS - Nameserver = indicating which servers are responsible for providing DNS information for that domain. NS records are used to delegate a subdomain to a different set of name servers.
CNAME (Canonical Name) Record: Creates an alias for a domain name, allowing it to resolve to another domain name.
MX (Mail Exchange) Record: Specifies the mail server responsible for receiving email on behalf of a domain.
PTR (Pointer) Record: Used for reverse DNS lookups, mapping an IP address to a domain name.
SOA (Start of Authority) Record: Contains administrative information about the DNS zone, including the primary name server and other parameters.
SRV (Service) Record: Specifies the location of a specific service within a domain, such as a SIP or XMPP service.
TXT (Text) Record: Allows arbitrary text to be associated with a domain, commonly used for adding human-readable information or for domain verification purposes.

26
Q

What is a pre-requisite for virtual network peering?

A

The two peered VNets do not have overlapping IP Address spaces.

27
Q

Can Network Security Groups be associated with resources outside of the region it is associated with?

A

Nosiry

28
Q

Can VNets in different tenants be peered?

A

Yessiry

29
Q

What DNS record types are supported by Microsoft Entra ID for registering custom domain names to a tenant?

A

TXT and MX

30
Q

What is the difference between NSG and ASGs?

A

ASGs group VMs based on application requirements so VMs can have specific network traffic rules based on the purpose they serve.

31
Q

What is azure service bus?

A

Azure Service Bus is a fully managed enterprise message broker with message queues and publish-subscribe topics

32
Q

Can you create a VM without a VNet?

A

No

Mikes AZ104 (8 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions