Network 2 Flashcards by Skip Miller

What IP address ranges must be used for a VNet according to RFC 1918?

10.0.0.0-10.255.255.255 (10.0.0.0/8), 172.16.0.0-172.31.255.255 (172.16.0.0/12), 192.168.0.0-192.168.255.255 (192.168.0.0/16).

How well did you know this?

Not at all

Perfectly

What happens if public IP ranges are used in a VNet?

The addresses within your VNet will take priority, preventing VMs from accessing the corresponding Internet addresses.

How well did you know this?

Not at all

Perfectly

Which IP ranges are reserved by the Azure platform and cannot be used in a VNet?

169.254.0.0/16 (Link-local), 168.63.129.16/32 (Azure-provided DNS).

How well did you know this?

Not at all

Perfectly

What is the requirement for the name of a subnet within a VNet?

The subnet name must be unique within the VNet and cannot be changed after creation.

How well did you know this?

Not at all

Perfectly

Why does Azure reserve a couple of IP addresses from each subnet?

For network identification and broadcast.

How well did you know this?

Not at all

Perfectly

What properties must be defined for a virtual network (VNet)?

Name, Location, Address Space, DNS settings, Subnets, Peerings.

How well did you know this?

Not at all

Perfectly

Can VNets be peered across different subscriptions and Azure AD tenants?

Yes, VNets can be peered across different subscriptions and Azure AD tenants.

How well did you know this?

Not at all

Perfectly

What is Global VNet peering?

Peering between VNets in different Azure regions, allowing traffic to travel over the Microsoft backbone infrastructure.

How well did you know this?

Not at all

Perfectly

What is a limitation of Global VNet peering with the Load Balancer’s Basic tier?

Global peering cannot be used to access the front-end IP of a basic internal Azure load-balancer in the remote VNet.

How well did you know this?

Not at all

Perfectly

What is a hub-and-spoke network topology?

A design where shared resources are deployed in a hub VNet, accessed by multiple applications in separate spoke VNets.

How well did you know this?

Not at all

Perfectly

How can you enable spoke-to-spoke communication without additional VNet peerings?

By deploying a network virtual appliance (NVA) in the hub and configuring user-defined routes (UDRs) to route traffic.

How well did you know this?

Not at all

Perfectly

What must be enabled to share a virtual network gateway between peered VNets?

Allow Gateway Transit on the peering connection from the VNet with the gateway.

How well did you know this?

Not at all

Perfectly

What are the two pricing tiers for Public IP addresses in Azure?

Basic and Standard.

How well did you know this?

Not at all

Perfectly

What is the key difference between Basic and Standard Public IP addresses?

Standard tier supports zone-redundant deployment, Basic tier does not.

How well did you know this?

Not at all

Perfectly

What are the different DNS-related services and features in Azure?

Azure DNS, Azure Traffic Manager, App service domains, Azure-provided DNS, Recursive DNS, Reverse DNS.

How well did you know this?

Not at all

Perfectly

What does Azure Traffic Manager do?

Uses DNS to implement global traffic management, directing traffic based on factors such as endpoint availability and user location.

How well did you know this?

Not at all

Perfectly

What is the purpose of a network security group (NSG)?

To control inbound and outbound traffic flows to Azure resources.

How well did you know this?

Not at all

Perfectly

What is a service tag in Azure?

A platform-defined shortcut mapping to the IP ranges of various Azure services, used in NSG rules.

How well did you know this?

Not at all

Perfectly

What does Performance Monitor in Network Performance Monitor (NPM) do?

Monitors packet loss and latency between endpoints in Azure and on-premises.

How well did you know this?

Not at all

Perfectly

What is required to configure Performance Monitor in NPM?

A VM or server running the Log Analytics agent at both ends of each monitored connection.

How well did you know this?

Not at all

Perfectly

What does Service Connectivity Monitor in NPM do?

Tests outbound connectivity from your network to open a TCP port, such as a website or application.

How well did you know this?

Not at all

Perfectly

What is the purpose of a gateway subnet in a VNet?

To deploy VPN gateways; it is a dedicated subnet used only for virtual network gateways.

How well did you know this?

Not at all

Perfectly

What is the recommended size for a gateway subnet?

A CIDR /27 address block to allow for future expansion.

How well did you know this?

Not at all

Perfectly

Can a VPN gateway be resized between different SKUs?

Yes, but only between VpnGw1, VpnGw2, and VpnGw3 tiers. Not for Basic tier.

How well did you know this?

Not at all

Perfectly

What is Border Gateway Protocol (BGP) used for in Azure VPN gateways?

To exchange routing information between networks automatically, enabling high availability and transit routing.

What is the default deployment configuration for a VPN gateway in Azure?

Active-standby, with two VMs for redundancy.

What additional configuration can be used to reduce VPN gateway downtime?

Active-active configuration, where both gateway instances have their own public IP addresses.

What is required for dual on-premises VPN endpoints in an active-active configuration?

BGP must be enabled to allow for redundant connections.

What is a common use of Availability Zones?

To provide high availability at the data center level.

What must be ensured for VNets to be connected using VNet peering?

They must have non-overlapping IP address spaces.

What is the purpose of user-defined routes (UDRs) in Azure?

To change the default behavior of subnets, typically to route traffic through a virtual appliance.

What does forced tunneling refer to in Azure networking?

Routing outbound Internet traffic via a VPN connection to a network security device.

What must be done to diagnose routing issues in Azure?

Review the effective routes for each network interface.

What is the use of Azure-provided DNS?

Internal DNS service allowing VMs in a VNet to find each other using DNS queries based on hostnames.

What are the key properties of a VNet subnet?

Name, Address range, Network security group, Route table, Service endpoints, Delegations.

What are the requirements for custom DNS settings in Azure VNets?

Can be configured at the VNet level and network interface level, but not at the subnet level.

What is the difference between internal and public Load Balancer in Azure?

Internal Load Balancer is used for Intranet-facing applications, Public Load Balancer for Internet-facing applications.

What does the frontend IP configuration of an Azure Load Balancer define?

The endpoint upon which the Load Balancer receives incoming traffic.

What are the key uses of the Azure DNS service?

Hosting DNS domains, managing DNS records, and providing name servers for DNS queries.

What does an NS record in Azure DNS do?

A record set at the zone apex containing the name servers for the DNS zone.

What does a PTR record in DNS provide?

Reverse DNS lookups in reverse lookup zones.

What does an SOA record indicate in DNS?

Start of Authority, required at the apex of every DNS zone.

What is service chaining in a hub-and-spoke network topology?

Using an NVA in the hub to route inter-spoke traffic, enabling spoke-to-spoke communication without additional VNet peerings.

What are the key functions of Azure Resource Manager templates?

Defining and deploying the configuration of Azure resources in a declarative manner.

What is the purpose of Azure App Service?

A PaaS-hosting service for building applications that process HTTP requests.

What does an App Service plan provide?

Compute resources for the web application to execute.

What is Azure Kubernetes Service (AKS)?

A managed Kubernetes service for deploying and managing containerized applications.

What is Azure Container Instances (ACI)?

A service for quickly deploying isolated containers without managing the backend infrastructure.

What is the benefit of using managed disks in Azure?

Azure manages the storage account, simplifying the management of disks and images.

What are the types of storage available for VM storage in Azure?

Standard HDD, Standard SSD, Premium SSD, Ultimate SSD.

What is a common method of troubleshooting VMs with connectivity issues?

Redeploy the virtual machine to move it to a different Azure node.

What is the Custom Script Extension used for?

Executing scripts on Windows or Linux-based VMs in Azure.

What is the difference between dynamic and static IP addresses in Azure VNets?

Dynamic IPs are released when the VM is stopped, static IPs are retained.

What is the purpose of Virtual Network (VNet) peering?

To allow virtual machines in separate VNets to communicate directly using private IP addresses.

What is the difference between basic and standard tier public IP addresses in Azure?

Basic tier supports dynamic allocation and open inbound traffic by default, standard tier supports static allocation and closed inbound traffic by default.

What is a service tag in Azure NSG rules?

A predefined label representing a group of IP address ranges for Azure services, used to simplify network security rules.

What is the role of Azure Traffic Manager?

To provide global traffic management by using DNS to route traffic based on endpoint availability and user location.

What are the benefits of using Azure DNS?

Hosting DNS domains, managing DNS records, and providing name servers for DNS queries.

What does an A record in DNS do?

Maps a name to an IPv4 address.

What is the purpose of recursive DNS in Azure?

To provide DNS name resolution from Azure VMs or other services, optionally using custom DNS servers.

What is reverse DNS in Azure?

Configuring reverse DNS lookup for an Azure-assigned public IP address.

What is required to delegate a DNS zone to Azure DNS?

Setting up appropriate NS records in the parent domain, pointing to Azure DNS name servers.

What is the purpose of a network security group (NSG) in Azure?

To control inbound and outbound traffic to and from Azure resources.

What is the significance of the CIDR /29 address block for a gateway subnet?

It is the minimum size required, though Microsoft recommends using a /27 for future expansion.

What is the advantage of zone-redundant deployment for public IP addresses?

It provides redundancy across different availability zones, protecting against data center-level failures.