AZ-700 Virtual Networks and Peering 2 — Questions and Answers
Question 1: Which subnet is reserved for Azure-managed services and cannot be used by user resources within a VNet?
- GatewaySubnet (Correct answer)
- AzureFirewallSubnet
- AzureBastionSubnet
- DefaultSubnet
Correct answer: GatewaySubnet
GatewaySubnet is a reserved subnet specifically required by Azure VPN and ExpressRoute gateways.
Question 2: What is the smallest subnet size you can create in an Azure VNet?
- /28
- /29 (Correct answer)
- /30
- /32
Correct answer: /29
Azure supports subnets as small as /29, which provides 3 usable IP addresses after reserving 5 Azure addresses.
Question 3: Which Azure service enables you to deploy resources into a VNet subnet while keeping the service managed by Microsoft?
- VNet Integration
- VNet Service Endpoints
- VNet Injection (Correct answer)
- VNet Peering
Correct answer: VNet Injection
VNet Injection allows managed Azure services (like Azure Container Instances) to be deployed into a customer-owned subnet.
Question 4: What does enabling 'Service Endpoints' on a subnet accomplish?
- Extends the VNet identity to Azure services over the Azure backbone (Correct answer)
- Creates a private IP for the Azure service
- Enables DNS resolution for the service
- Configures a firewall rule on the service
Correct answer: Extends the VNet identity to Azure services over the Azure backbone
Service Endpoints extend the VNet's identity to supported Azure services over the Microsoft backbone, restricting access to that VNet.
Question 5: Which VNet feature allows you to add additional, non-contiguous address spaces to an existing VNet without downtime?
- Address space expansion (Correct answer)
- Subnet delegation
- CIDR extension
- VNet resize
Correct answer: Address space expansion
Azure allows you to add additional address spaces to an existing VNet at any time without downtime.
Question 6: When peering two VNets, what happens to existing connections if peering is deleted?
- Connections remain active until manually terminated
- Traffic routing between the VNets is immediately lost (Correct answer)
- A 30-minute grace period allows reconnection
- Azure automatically recreates peering
Correct answer: Traffic routing between the VNets is immediately lost
Deleting a VNet peering immediately removes the route and drops all traffic between the two VNets.
AZ-700 Virtual Networks and Peering 2
Which subnet is reserved for Azure-managed services and cannot be used by user resources within a VNet?