AZ-800 - Microsoft Azure Networking Solutions Azure Virtual Network Peering Questions and Answers

Question 1

An Azure administrator has configured VNet peering between VNet-A and VNet-B, and also between VNet-B and VNet-C. A virtual machine in VNet-A needs to communicate with a virtual machine in VNet-C. Which statement accurately describes the connectivity between VNet-A and VNet-C?

Accepted Answer

VNet-A and VNet-C cannot communicate because VNet peering is non-transitive.

Answer

Azure Virtual Network Peering is a non-transitive relationship. If VNet-A is peered with VNet-B, and VNet-B is peered with VNet-C, there is no implied or automatic peering relationship between VNet-A and VNet-C. To enable communication between VNet-A and VNet-C, they must be directly peered, or a Network Virtual Appliance (NVA) with user-defined routes must be configured in VNet-B to route the traffic.

Question 2

You are designing a hub-and-spoke network topology in Azure. The hub VNet (Hub-VNet) has a VPN gateway that provides connectivity to your on-premises network. You need to allow spoke VNets to access the on-premises network through the gateway in Hub-VNet. Which VNet peering configuration setting must be enabled?

Accepted Answer

Allow gateway transit on the Hub-VNet peering connection and Use remote gateways on the spoke VNet peering connections.

Answer

To allow spoke VNets to use the gateway in a hub VNet, you must enable 'Allow gateway transit' on the peering from the hub VNet to the spokes. Concurrently, on the peering from the spoke VNets to the hub, you must enable 'Use remote gateways'. This configuration allows the spoke VNets to use the hub's gateway for on-premises connectivity without needing their own gateways.

Question 3

Which of the following is a primary benefit of using Azure Virtual Network Peering to connect two VNets in the same region?

Accepted Answer

It provides a low-latency, high-bandwidth connection using the Microsoft backbone.

Answer

A key benefit of VNet peering is that it creates a direct, private connection between virtual networks using the Microsoft backbone infrastructure. This results in a low-latency, high-bandwidth connection for resources in the peered networks. Traffic is not automatically encrypted (though it is private), it does not extend the broadcast domain, and you cannot peer virtual networks with overlapping IP address spaces.

Question 4

A company has two Azure virtual networks, VNet-Sales in the East US region and VNet-Marketing in the West Europe region. They need to ensure resources in both VNets can communicate securely and privately. Which Azure networking feature should be used to connect these two VNets?

Accepted Answer

Global VNet Peering.

Answer

Global Virtual Network Peering is the feature designed to connect virtual networks across different Azure regions. This allows resources to communicate using private IP addresses over the Microsoft backbone network, just like with local peering, but between regions. Local VNet peering only works for VNets within the same region. While a VNet-to-VNet VPN or ExpressRoute could also connect them, Global VNet Peering is the most direct and often simplest solution for this scenario.

Question 5

An administrator wants to route all traffic from a spoke VNet through a Network Virtual Appliance (NVA) located in a peered hub VNet for inspection. What combination of features is required to implement this 'service chaining' scenario?

Accepted Answer

User-Defined Routes (UDR) and enabling 'Allow forwarded traffic' on the peering.

Answer

Service chaining enables you to direct traffic from one VNet to an NVA in a peered VNet. This is accomplished by creating a User-Defined Route (UDR) that specifies the IP address of the NVA as the next hop. Additionally, the 'Allow forwarded traffic' setting must be enabled on the VNet peering link from the hub to the spoke to permit the NVA to forward traffic that did not originate from itself.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Azure Virtual Network Peering Questions and Answers