Networking Fundamentals Flashcards

Which Azure service provides a fully managed, cloud-based network address translation (NAT) gateway to allow outbound internet connectivity from a virtual network?

Answer: Azure NAT Gateway

Azure NAT Gateway provides outbound-only internet connectivity for resources in a virtual network without exposing inbound internet access.

What is the default behavior when two Azure Virtual Networks are NOT peered together?

Answer: They are completely isolated and cannot communicate

Virtual networks in Azure are logically isolated from each other by default; communication requires explicit configuration such as VNet peering or VPN.

Which IP address range is NOT a valid private IP address range per RFC 1918?

Answer: 198.51.100.0/24

198.51.100.0/24 (TEST-NET-2) is reserved for documentation purposes, not private use; the RFC 1918 ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.

In Azure, what is the minimum subnet size allowed when creating a subnet in a virtual network?

Answer: /29 (8 addresses)

Azure requires a minimum subnet prefix of /29, which provides 8 IP addresses (3 usable after reserving 5 for Azure infrastructure).

Which OSI layer does the Azure Application Gateway primarily operate at?

Answer: Layer 7 (Application)

Azure Application Gateway is a Layer 7 load balancer that can make routing decisions based on HTTP attributes such as URI path or host headers.

What type of routing does Azure use by default to forward traffic between subnets within the same virtual network?

Answer: System routes managed by Azure

Azure automatically creates system routes for each subnet to enable traffic flow between subnets in the same VNet without any user configuration.

Which protocol is used by Azure VPN Gateway for site-to-site connections to establish IPsec tunnels?

Answer: IKEv1 and IKEv2

Azure VPN Gateway supports both IKEv1 and IKEv2 for establishing IPsec/IKE tunnels in site-to-site VPN connections.