Implement Virtual Networks (10-15%) Flashcards
What are the 2 requirements to create a DNS zone in Azure DNS?
- The name of the zone must be unique within the resource group.
- The zone must not already exist in that resource group.
True/False: The same zone name can be reused in a different resource group or a different Azure subscription
True
What DNS record types does Azure DNS support?
Azure DNS supports all common DNS record types: A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, and TXT. Note that SPF records are represented using TXT records.
What is a Record Set in relation to Azure DNS?
A collection of DNS records in a zone that have the same name and are of the same type - aka resource record set.
Example: Sometimes you need to create more than one DNS record with a given name and type. For example, suppose the ‘www.contoso.com’ web site is hosted on two different IP addresses. The website requires two different A records, one for each IP address.
Which 2 types of DNS records are not allowed to have multiple entries (record set)?
- SOA
2. CNAME
Which 2 types of DNS record sets do not support Wild Cards in Azure DNS?
- NS
2. SOA
True/False: Azure DNS supports using Azure Resource Manager tags on DNS zone resources.
True
What is the difference between Tags and Metadata in Azure DNS?
Similar to tags, metadata enables you to associate name-value pairs with each record set. This can be useful, for example to record the purpose of each record set. Unlike tags, metadata cannot be used to provide a filtered view of your Azure bill and cannot be specified in an Azure Resource Manager policy.
Azure DNS default zones per subscription?
100
Azure DNS default record sets per zone?
5000
Azure DNS default records per record set?
20
PS: Get Name Servers from Azure DNS?
Get-AzureRmDnsZone
Does Azure DNS provide an Authoritative or Recursive DNS?
Azure DNS provides an Authoritative DNS service.
*Cloud Services and VMs within Azure are automatically configured to use a recursive DNS service that is provided separately as part of Azure’s infrastructure.
What are the 3 Load Balancing Policies for Traffic Manager?
- Performance - Direct to closest service base3d on network latency
- Round Robin - Distribute equally across all services
- Failover - backup if primary fails.
What type of DNS record is needed for Traffic Manager?
CNAME
Default URL for Traffic Manager?
.trafficmanager.net
True/False: The client connects to the application service endpoint directly, NOT through Traffic Manager.
True
What are the 3 ways you can connect Azure to your On-Prem?
- Point To Site VPN
- Site to Site VPN
- Azure ExpressRoute
What are the 2 ways you can filter traffic between subnets in Azure?
- Network Security Groups (NSG)
2. Network Virtual Appliance (NVA) - 3rd party appliances like Cisco, Barricuda, pfSense,F5
How does a VM (by default) communicate to the outside Internet?
The private IP address of the resource is source network address translated (SNAT) to a public IP address by the Azure infrastructure.
Default URL for Azure Load Balancer?
.cloudapp.net
What type of Algorithm does Azure Load Balancer User?
A hash-based distribution algorithm. By default, it uses a 5-tuple hash composed of source IP, source port, destination IP, destination port, and protocol type to map traffic to available servers.
What 3 Types of Service Monitoring can Azure Load Balancer do?
- Guest agent probe (on Platform as a Service Virtual Machines only)
- HTTP Custom Probe
- TCP Custom Probe
What are the 3 different options to distribute network traffic using Microsoft Azure?
- Azure Load Balancer works at the transport layer (Layer 4 in the OSI network reference stack). It provides network-level distribution of traffic across instances of an application running in the same Azure data center.
- Application Gateway works at the application layer (Layer 7 in the OSI network reference stack). It acts as a reverse-proxy service, terminating the client connection and forwarding requests to back-end endpoints.
- Traffic Manager works at the DNS level. It uses DNS responses to direct end-user traffic to globally distributed endpoints. Clients then connect to those endpoints directly.
PS: Verify a IP Address is free?
Test-AzureRmStaticVnetIP
CLI: Create Interla Load Balancer Set
azure network lb create