AZ-800 - Microsoft Azure Networking Solutions Azure Virtual Network Peering Questions and Answers

Question 1

An Azure administrator has configured VNet peering between VNet-A and VNet-B, and also between VNet-B and VNet-C.
A virtual machine in VNet-A needs to communicate with a virtual machine in VNet-C.
Which statement accurately describes the connectivity between VNet-A and VNet-C?

Accepted Answer

VNet-A and VNet-C cannot communicate because VNet peering is non-transitive.

Answer

VNet-A and VNet-C can communicate by default because of the peering with VNet-B.

Answer

Communication is possible only if Global VNet Peering is used for both connections.

Answer

A VPN Gateway must be deployed in VNet-B to allow traffic between VNet-A and VNet-C.

Question 2

You are designing a hub-and-spoke network topology in Azure. The hub VNet (Hub-VNet) has a VPN gateway that provides connectivity to your on-premises network. You need to allow spoke VNets to access the on-premises network through the gateway in Hub-VNet. Which VNet peering configuration setting must be enabled?

Accepted Answer

Allow gateway transit on the Hub-VNet peering connection and Use remote gateways on the spoke VNet peering connections.

Answer

Allow forwarded traffic on the spoke VNet peering connections.

Answer

Enable 'Service Chaining' on all peering connections.

Answer

Configure User-Defined Routes (UDR) on all spoke VNets pointing to the hub VNet.

Question 3

Which of the following is a primary benefit of using Azure Virtual Network Peering to connect two VNets in the same region?

Accepted Answer

It provides a low-latency, high-bandwidth connection using the Microsoft backbone.

Answer

Traffic between the peered VNets is automatically encrypted with IPsec.

Answer

It extends the broadcast domain across the two virtual networks.

Answer

It allows virtual networks with overlapping IP address spaces to be peered.

Question 4

A company has two Azure virtual networks, VNet-Sales in the East US region and VNet-Marketing in the West Europe region. They need to ensure resources in both VNets can communicate securely and privately. Which Azure networking feature should be used to connect these two VNets?

Accepted Answer

Global VNet Peering.

Answer

A VNet-to-VNet VPN Gateway connection.

Answer

Azure ExpressRoute.

Answer

Local VNet Peering.

Question 5

An administrator wants to route all traffic from a spoke VNet through a Network Virtual Appliance (NVA) located in a peered hub VNet for inspection. What combination of features is required to implement this 'service chaining' scenario?

Accepted Answer

User-Defined Routes (UDR) and enabling 'Allow forwarded traffic' on the peering.

Answer

Gateway Transit and a Route Table with a default route to the NVA.

Answer

A Network Security Group (NSG) and VNet Peering.

Answer

Global VNet Peering and Azure Firewall.

Question 6

When configuring a VNet peering connection between VNet1 and VNet2, what is the status of the 'Peering status' property immediately after the administrator initiates the peering from VNet1 to VNet2, but before the reciprocal peering is created from VNet2 to VNet1?

Accepted Answer

Initiated

Answer

Connected

Answer

Updating

Answer

Disconnected