Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

D338 > Skill 4.1 Implement and Manage Virtual Networking > Flashcards

Skill 4.1 Implement and Manage Virtual Networking Flashcards

1
Q

What is VNet peering

A

Allows two seperate virtual networks to communicate diretly by using their IP addresses. They can either be in teh same Azure region or in seperate Azure regions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Global VNet peering

A

Peering netween vnets in different regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does VNet traffic travel over

A

Microsoft Backbone infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Can VNets have non-overlapping IP address spaces

A

no

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How many peering connections can exist on a VNet

A

500

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What must be configured to allow connectivity between a second VNet with an external network

A

Use Remote Gateways – Settings must be enabled on the peering connection from VNET-B to VNET-A. This informs VNET_B of teh availability of the gateway in VNET-A.
Allow Gateway Transit – Optio must be enabled on teh peering connection form VNET-A TO VNET-B. This permits traffic from VNET-B to use VNET-A’s gateway to send traffic to he external network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Where are private IP addresses configured

A

within the IP configurations of teh network interface

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the first private IP address to be allocated

A

.4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are uses for Static private IP addresses

A

Virtual machines that act as a domain controllers or DNS servers
Resources that require firewall rules using IP addresses
Resources accessed by other apps/resources through an IP address explicitly, rather then a domain name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What happens by default when you change a IP address to static

A

Azure will assign the previously assigned dynamic IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is service chaining

A

Using a network virtual appliance as a hub through user-defined routes(UDR) to route inter-spoke traffic through the NVA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can a peering connection accept traffic from by default

A

Traffic originating from the VNet to which it is connected

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What does associating a public IP address with a network interface create

A

An internet facing endpoint, allowing your virtual machine to receive network traffic directly from the internet

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What does associating an VM with a public IP require

A

The NIC must be updated to reference the public IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the tiers of public IP addresses

A

Basic – supports both static and dynamic allocation methods. Open by default for inbound traffic. Use NSGs to restrict inbound and outbound traffic. Not Zone redundant and doesn’t support availability zone. Does not support public IP prefixes.
Standard Tier – Supports static allocation only. Closed by default for inbound traffic. Use NSG’s to allow inbound traffic and restrict outbound traffic. Zone redundant by default and allows the use of availability zones and Public IP addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Describe dynamic allocation

A

Only resources in use get a IP address which is reallocated if they are stopped or deleted.
An actual IP address is only allocated to the public IP address resource when the resource is in use. If a virtual machine is stopped (deallocated) or deleted, the IP address assigned to the public IP address resource is released and returned to the pool of available IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What must be specified when creating an IP prefix

A

prefix resource name,
subnet size,
Azure region where it will be located.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the ways to configure a DNS label for an Azure public IP address

A

By specifying the DNS name label property of the public IP address resource
By creating a DNS, A record in Azure DNS or a third-party DNS service hosting a DNS domain
By creating a DNS CNAME record in Azure DNS or third pary hosting
By creating an Alias record in Azure DNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Describe SNAT

A

Source Network address Translation – Used for when traffic leaves a virtual machine via the private IP address and used SNAT to map the outbound traffic from the private IP address to the public IP address.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What are default system routes in Azure

A

Within the same subnet
From one subnet to another within VNet
VMs to the internet
A VNet to another VNet through a VPN gateway
A VNet to anotehr VNet trough VNet Peering
A VNet to your on-premises network through a VPN
A VNet to your on-premises network through a VPN gateway or ExpressRoute (Optional)
VirtualNetworkServiceEndpoint (Optional)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Describe user defined routes in Azure

A

Useful for when you want to send traffic through a virtual network appliance

22
Q

What are the next hop types supported for UDRs(User Defined Routes)

A

Virtual Appliance – A VM running a network application such as a firewall
Virtual network gateway
Virtual Network Gateway – Used to route traffic with the virtual network
Internet – Used to route a specific IP address of prefix to the internet
None– Used to drop all traffic sent to a given IP address or prefix.

23
Q

What happens if you apply a route table to a subnet if the route table contains a rule with a next hop address within that subnet.

A

It creates a routing loop

24
Q

What has to be enabled for a VM to accept a network packet addressed to a different machine to be passed to the virtual client

A

IP forwarding

25
Q

What are the route priorities

A

User-defined routes
System routes for traffic in a virtual network, accross a virtual network peering or to a virtual network endpoint
BGP routes
Other System routes

26
Q

What are service endpoints

A

mechanism to integrate Azure PaaS services into your virtual network and access them through a Microsoft Azure backbone network instead of over the internet. Service endpoints precent the exposure of data and services to teh internet

27
Q

What are private endpoints

A

They establish a connection between any of the supported Azure services and your virtual network. Provides a secure channel between a VNet and a service. The private endpoint gets a pirvate IP address from your VNet address space.

28
Q

What is a DNS Zone

A

representation of a domain name in an authoritative DNS server. It contains the colleciton of DNS records for a given domain name

29
Q

What is Azure’s service for purchasing domain names

A

App Service Domains service

30
Q

Where do DNS settings on a user’s device point to

A

A recursive DNS server, also sometimes known as local DNS service (or LDNS) or simply a DNS resolver. Recursive DNS service is typically hosted by your company or by your ISP

31
Q

What do NS records do

A

Tell clients on the internet where to find the name and servers for a given DNS zone. NS records are also configured in the parent zone, and a copy of the records is also present in the child zone

32
Q

What DNS services are available in Azure

A

Azure DNS
Azure Traffic Manager
App Service Domain
Azure Provided DNS
Recursive DNS
Reverse DNS

33
Q

Describe Azure DNS

A

Allows you to host your DNS domains in Azure. Provides the ability to create and manage DNS records for your domain and provides the name servers, which answer DNS queries for your domain from other users on the internet

34
Q

Azure Traffic manager

A

An intelligent DNS service that uses DNS to implement global traffic management. Where Azure DNS always provides the same DNS response to a given DNS query, in Azure Traffic manager the same query may result in one of several responses

35
Q

App Service Domains

A

Allows purchasing of domain names, which can then be hosted in Azure DNS. This service is integrated with Azure App Service but can be used for any domain registration eve if App Service is not being used.

36
Q

Azure-provided DNS

A

Sometimes called Internal DNS, it allows the VMs in your virtual network to find each other, using DNS queries based on the hostname of each VM. The DNS queries are internal (Private) to the virtual network.

37
Q

Recursive DNS

A

A service provided by Azure for DNS name resolution from your Azure VMs or other Azure services. You can also configure your VMs to use your own DNS server instead. This is sometimes informally called bring your own DNS. This is common when joining your VMs to a domain controller.

38
Q

Reverse DNS

A

Provides the ability to configure the reverse DNS lookup for an Azure-assigned public IP address.

39
Q

How does Azure Treat DNS Zones

A

As a resoure in Azure DNS. Creating a DNS zone resource allocates authoritative DNS name servers to hsot the DNS records for that zone.

40
Q

What is a glue record

A

A DNS server record that is not authoritative for the zone and is used to avoid a condition of impossible dependencies for the DNS zone.

41
Q

how does Azure DNS treat child zones

A

As entirely seperate zones.

42
Q

What is a record set

A

A collection of records with the same name and the same type.They are a child resource of the DNS zone and can contain up to 20 individual records

43
Q

What is a CAA record

A

Used to specify which certificate authorities can issue certificates for a domain. Must be configured using CLI or Powershell

44
Q

What are SPF DNS records

A

SPF records are used to identify legitimate mail servers for a domain and help prevent spam

45
Q

When creating a DNS zone what does the location field specify

A

the resource group location

46
Q

What is needed to set up a DNS delegation Zone

A

name servers must be listed in teh corresponding NS records in the parent zone.

47
Q

What is a VNET

A

A Azure Virtual Network that provides the foundation of the Azure networking infrastructure

48
Q

What IP addresses do you always lose with Azure networks

A

.0 – Network Address
.1 = Azure Gateway
.2 & .3 = DNS
.255 = Broadcast
Because of this you have can’t have a network that is smaller then a /29

49
Q

What is the most important setting when configuring a VNET

A

the IP range or ranges that the vnet will use

50
Q
A

D338 (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions