AZ-800 - Microsoft Azure Networking Solutions ExpressRoute Circuit Configuration Questions and Answers — Questions and Answers
Question 1: A company has two on-premises data centers, one in New York and one in Los Angeles. Each data center has its own ExpressRoute circuit connecting to the nearest Azure region. The company needs to enable direct, private connectivity between the two on-premises data centers over the Microsoft backbone network. Which ExpressRoute feature should be configured?
- ExpressRoute Direct
- ExpressRoute Premium
- ExpressRoute Global Reach (Correct answer)
- ExpressRoute Local
Correct answer: ExpressRoute Global Reach
ExpressRoute Global Reach is designed to link ExpressRoute circuits together to enable private data exchange between on-premises networks. By enabling this feature, the company can use the Microsoft global network to connect their New York and Los Angeles data centers without the traffic traversing the public internet.
Question 2: An organization is configuring a new ExpressRoute circuit and needs to establish private peering to connect their on-premises network with an Azure Virtual Network. When configuring the private peering, which of the following is a mandatory configuration item?
- A /32 IPv4 subnet for the primary link
- A public Autonomous System Number (ASN)
- An MD5 hash for authentication
- A unique VLAN ID for the peering (Correct answer)
Correct answer: A unique VLAN ID for the peering
When configuring Azure private peering for an ExpressRoute circuit, a unique VLAN ID must be specified to isolate the peering traffic. This VLAN ID must not be in use by any other peering on the same circuit. While ASNs are required, they can be public or private, and an MD5 hash is optional. A /29 or two /30 subnets are required for BGP peering, not a /32.
Question 3: A financial services company requires a dedicated, high-bandwidth connection to Azure for massive data ingestion and to meet regulatory compliance requiring physical isolation. They plan to manage their own routing and need dual 100 Gbps connectivity. Which ExpressRoute connectivity model best suits these requirements?
- ExpressRoute with a cloud exchange provider
- ExpressRoute Direct (Correct answer)
- ExpressRoute with an IP VPN provider
- ExpressRoute Premium
Correct answer: ExpressRoute Direct
ExpressRoute Direct provides customers with dual 10 Gbps, 100 Gbps, or 400 Gbps ports directly connected to Microsoft's global network. This model is ideal for scenarios requiring massive data ingestion, physical isolation for regulated industries, and granular control over circuit distribution, which perfectly matches the company's needs.
Question 4: You are creating an ExpressRoute circuit and need to select a SKU that provides access to all Azure regions within the same geopolitical area as the peering location. For example, a circuit in a US peering location should be able to access all Azure regions in North America. Which SKU should you choose?
- Local
- Basic
- Standard (Correct answer)
- Premium
Correct answer: Standard
The ExpressRoute Standard SKU provides connectivity to all Azure regions within the same geopolitical area from a single peering location. The Local SKU only provides access to one or two regions in or near the same metro as the peering location. The Premium SKU extends connectivity globally across all Azure regions.
Question 5: A company's IT department manages an ExpressRoute circuit in their own Azure subscription. They need to grant another department, which uses a separate Azure subscription, the ability to connect a virtual network to this same ExpressRoute circuit. What must the circuit owner create to enable this cross-subscription connection?
- A resource lock on the ExpressRoute circuit
- A new peering configuration
- An authorization (Correct answer)
- A service principal
Correct answer: An authorization
To connect a virtual network in a different subscription to an ExpressRoute circuit, the circuit owner must create an authorization. This generates an authorization key and a resource ID that the owner of the virtual network (the 'circuit user') can then use to 'redeem' and create the connection to the shared circuit.
Question 6: When configuring private peering for an ExpressRoute circuit, what is the private Autonomous System Number (ASN) range that is reserved for Microsoft's internal use and cannot be used by the customer?
- 64512-65534
- 1-64511
- 65536-4294967294
- 65515-65520 (Correct answer)
Correct answer: 65515-65520
Microsoft reserves the ASN range of 65515 to 65520 for its internal use. When configuring BGP for ExpressRoute private peering, you can use a private ASN, but it must be outside of this reserved range.
AZ-800 - Microsoft Azure Networking Solutions ExpressRoute Circuit Configuration Questions and Answers
A company has two on-premises data centers, one in New York and one in Los Angeles.
Each data center has its own ExpressRoute circuit connecting to the nearest Azure region.
The company needs to enable direct, private connectivity between the two on-premises data centers over the Microsoft backbone network.
Which ExpressRoute feature should be configured?