(Unit 7 of 9) Azure Virtual Private Networks

Question 1

What is the difference between AZ VN and AZ Private VN?

Answer 1

A virtual private network (VPN) uses an encrypted tunnel within another network.

Question 2

Name 3 methods of connectivity when using a VPN

Answer 2

1. Connect on-premises datacenters to virtual networks through a site-to-site connection.
2. Connect individual devices to virtual networks through a point-to-site connection.
3. Connect virtual networks to other virtual networks through a **network-to-network **connection.

Question 3

What is the principle behind VPNs?

Answer 3

All data transfer is encrypted inside a private tunnel as it crosses the internet.

Question 4

In Azure, both types of VPN gateways use a ____ as the only method of authentication.

Answer 4

pre-shared key

Question 5

When you deploy a VPN gateway, you specify the VPN type: either ____or ____ .

Answer 5

1. Policy-based
2. Route-based

Question 6

Explain both base types regarding VPNs (1)

Answer 6

PB: Gateway specifies statically the IP of packets that should be encrypted through tunnel.

Device evaluates data against set IP to choose where packet goes.

Question 7

Explain both base types regarding VPNs (2)

Answer 7

IPSec tunnels are modeled as a network interface or virtual tunnel interface.

IP routing (either static routes or dynamic routing protocols) decides which one of these tunnel interfaces to use when sending each packet.

Question 8

If your require these types of connectivity, a VPN gateway would be ideal.

Answer 8

1.Connections between virtual networks
2. Point-to-site connections
3. Multisite connections
4. Coexistence with an Azure ExpressRoute gateway

Question 9

Name and describe the High Availability scenarios (1)

Answer 9

Active/standby - VPNs deployed as 2 instances, one active and one fail-over. Connections are interrupted.

Question 10

Name and describe the High Availability scenarios (1)

Answer 10

Active/standby - VPNs deployed as 2 instances, one active and one fail-over. Connections are interrupted.

Question 11

Name and describe the High Availability scenarios (2)

Answer 11

Active/active - In this configuration, you assign a unique public IP address to each instance.You then create separate tunnels from the on-premises device to each IP address

Question 12

Name and describe the High Availability scenarios (3)

Answer 12

ExpressRoute failover - where there’s risk associated with an outage of an ExpressRoute circuit, you can also provision a VPN gateway that uses the internet as an alternative method of connectivity.

Question 13

Name and describe the High Availability scenarios (4)

Answer 13

Zone-redundant gateways - Deploying gateways in Azure availability zones physically and logically separates gateways.