AZ-800 - Microsoft Azure Networking Solutions ExpressRoute Circuit Configuration Questions and Answers

Question 1

A company has two on-premises data centers, one in New York and one in Los Angeles. Each data center has its own ExpressRoute circuit connecting to the nearest Azure region. The company needs to enable direct, private connectivity between the two on-premises data centers over the Microsoft backbone network. Which ExpressRoute feature should be configured?

Accepted Answer

ExpressRoute Global Reach

Answer

ExpressRoute Global Reach is designed to link ExpressRoute circuits together to enable private data exchange between on-premises networks. By enabling this feature, the company can use the Microsoft global network to connect their New York and Los Angeles data centers without the traffic traversing the public internet.

Question 2

An organization is configuring a new ExpressRoute circuit and needs to establish private peering to connect their on-premises network with an Azure Virtual Network. When configuring the private peering, which of the following is a mandatory configuration item?

Accepted Answer

A unique VLAN ID for the peering

Answer

When configuring Azure private peering for an ExpressRoute circuit, a unique VLAN ID must be specified to isolate the peering traffic. This VLAN ID must not be in use by any other peering on the same circuit. While ASNs are required, they can be public or private, and an MD5 hash is optional. A /29 or two /30 subnets are required for BGP peering, not a /32.

Question 3

A financial services company requires a dedicated, high-bandwidth connection to Azure for massive data ingestion and to meet regulatory compliance requiring physical isolation. They plan to manage their own routing and need dual 100 Gbps connectivity. Which ExpressRoute connectivity model best suits these requirements?

Accepted Answer

ExpressRoute Direct

Answer

ExpressRoute Direct provides customers with dual 10 Gbps, 100 Gbps, or 400 Gbps ports directly connected to Microsoft's global network. This model is ideal for scenarios requiring massive data ingestion, physical isolation for regulated industries, and granular control over circuit distribution, which perfectly matches the company's needs.

Question 4

You are creating an ExpressRoute circuit and need to select a SKU that provides access to all Azure regions within the same geopolitical area as the peering location. For example, a circuit in a US peering location should be able to access all Azure regions in North America. Which SKU should you choose?

Accepted Answer

Standard

Answer

The ExpressRoute Standard SKU provides connectivity to all Azure regions within the same geopolitical area from a single peering location. The Local SKU only provides access to one or two regions in or near the same metro as the peering location. The Premium SKU extends connectivity globally across all Azure regions.

Question 5

A company's IT department manages an ExpressRoute circuit in their own Azure subscription. They need to grant another department, which uses a separate Azure subscription, the ability to connect a virtual network to this same ExpressRoute circuit. What must the circuit owner create to enable this cross-subscription connection?

Accepted Answer

An authorization

Answer

To connect a virtual network in a different subscription to an ExpressRoute circuit, the circuit owner must create an authorization. This generates an authorization key and a resource ID that the owner of the virtual network (the 'circuit user') can then use to 'redeem' and create the connection to the shared circuit.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions ExpressRoute Circuit Configuration Questions and Answers