Mod 12 - Describe Azure compute and networking services

Question 1

what are the 3 resources you need to choose when creating VM

Answer 1

• Size (purpose, number of processor cores, and amount of RAM)
• Storage disks (hard disk drives, solid state drives, etc.)
• Networking (virtual network, public IP address, and port configuration)

Question 2

Azure Virtual Desktop

Answer 2

desktop and application virtualization service that runs on the cloud, type of az VM

Question 3

Azure Virtual Desktop purpose

Answer 3

: It enables you to use a cloud-hosted version of Windows from any location. Azure Virtual Desktop works across devices and operating systems, and works with apps that you can use to access remote desktops or most modern browsers.

Question 4

what are 4 attributes of AZ Virtual desktop

Answer 4

• centralized security management for users’ desktops with Azure Active Directory
  o MFA
  o RBAC
• data and apps are separated from the local hardware
• user sessions are isolated in both single and multi-session environments.
• lets you use Windows 10 or Windows 11 Enterprise multi-session, the only Windows client-based operating system that enables multiple concurrent users on a single VM.

Question 5

Purpose of Azure Virtual Networking

Answer 5

enable Azure resources, such as VMs, web apps, and databases, to communicate with each other, with users on the internet, and with your on-premises client computers

Question 6

• Public endpoints

Answer 6

have a public IP address and can be accessed from anywhere in the world.

Question 7

• Private endpoints

Answer 7

exist within a virtual network and have a private IP address from within the address space of that virtual network

Question 8

Route-based gateways

Answer 8

Route-based gateways implement the route-based VPNs.

Route-based VPNs use “routes” in the IP forwarding or routing table to direct packets into their corresponding tunnel interfaces. The tunnel interfaces then encrypt or decrypt the packets in and out of the tunnels

Question 9

• Policy-based VPN gateways

Answer 9

Policy-based gateways implement policy-based VPNs.

Policy-based VPNs encrypt and direct packets through IPsec tunnels based on the combinations of address prefixes between your on-premises network and the Azure VNet.

The policy (or Traffic Selector) is usually defined as an access list in the VPN configuration.

Question 10

Zone-redundant gateways VPN config

Answer 10

means that all instances of the gateways will be deployed across Azure availability zones, and each availability zone is a different fault and update domain

These gateways require different gateway stock keeping units (SKUs) and use Standard public IP addresses instead of Basic public IP addresses.

Question 11

Active/active VPN config

Answer 11

you assign a unique public IP address to each instance. You then create separate tunnels from the on-premises device to each IP address

Question 12

Active/standby VPN config

Answer 12

In active-standby mode, one IPsec tunnel is active and the other tunnel is in standby

By default, VPN gateways are deployed as two instances in an active/standby configuration, even if you only see one VPN gateway resource in Azure

Question 13

how many az VPN gateways can you deploy on a VNET

Answer 13

One

Question 14

Azure VPN Gateway

Answer 14

instances are deployed in a dedicated subnet of the virtual network and enable the following connectivity:

• Connect on-premises datacenters to virtual networks through a site-to-site connection.
• Connect individual devices to virtual networks through a point-to-site connection.
• Connect virtual networks to other virtual networks through a network-to-network connection

Question 15

• Point-to-site virtual private network

Answer 15

connections are from a computer outside your organization back into your corporate network. In this case, the client computer initiates an encrypted VPN connection to connect to the Azure virtual network.

Question 16

• Site-to-site virtual private network

Answer 16

link your on-premises VPN device or gateway to the Azure VPN gateway in a virtual network. In effect, the devices in Azure can appear as being on the local network. The connection is encrypted and works over the internet

Question 17

what are 3 options for express route

Answer 17

1. Connectivity can be from an any-to-any (IP VPN) network,
2. a point-to-point Ethernet network, or
3. a virtual cross-connection through a connectivity provider at a colocation facility

Question 18

ExpressRoute enables direct access to 4 MS services

Answer 18

• Microsoft Office 365
• Microsoft Dynamics 365
• Azure compute services, such as Azure Virtual Machines
• Azure cloud services, such as Azure Cosmos DB and Azure Storage

Question 19

ExpressRoute Global Reach

Answer 19

exchange data across your on-premises sites by connecting your ExpressRoute circuits. allowing them to communicate without transferring data over the public internet.

Question 20

Any-to-any networks

Answer 20

With any-to-any connectivity, you can integrate your wide area network (WAN) with Azure by providing connections to your offices and datacenters

Question 21

Directly from ExpressRoute sites

Answer 21

You can connect directly into the Microsoft’s global network at a peering location strategically distributed across the world.

Question 22

Point-to-point Ethernet connection

Answer 22

Point-to-point ethernet connection refers to using a point-to-point connection to connect your facility to the Microsoft cloud

Question 23

CloudExchange colocation model

Answer 23

Co-location refers to your datacenter, office, or other facility being physically co-located at a cloud exchange, such as an ISP. If your facility is co-located at a cloud exchange, you can request a virtual cross-connect to the Microsoft cloud

Question 24

what are the 4 express route connectivity model

Answer 24

• CloudExchange colocation
• Point-to-point Ethernet connection
• Any-to-any connection
• Directly from ExpressRoute sites

Question 25

what are the 3 items that still go over public internet

Answer 25

DNS queries, certificate revocation list checking, and Azure Content Delivery Network requests

Question 26

what routing protocol is used for expressroute

Answer 26

BGP

Question 27

• Azure ExpressRoute

Answer 27

provides a dedicated private connectivity to Azure that doesn’t travel over the internet. ExpressRoute is useful for environments where you need greater bandwidth and even higher levels of security.

Question 28

how does azure route traffic by default

Answer 28

any connected virtual networks, on-premises networks, and the internet

Question 29

what are the two ways azure VNETS filter traffic between subnets

Answer 29

• Network security groups
• Network virtual appliances

Question 30

• Network security groups

Answer 30

Azure resources that can contain multiple inbound and outbound security rules

Question 31

• Network virtual appliances

Answer 31

specialized VMs that can be compared to a hardened network appliance. A network virtual appliance carries out a particular network function, such as running a firewall or performing wide area network (WAN) optimization

Question 32

what order are NSG Rules processed

Answer 32

processed in priority order, with lower numbers processed before higher numbers