AZ-800 Azure Route Tables and User-Defined Routes 2 — Questions and Answers
Question 1: What does the 'BGP route propagation' setting on an Azure subnet control?
- Whether VNet routes are advertised to on-premises via BGP
- Whether routes learned from a VPN or ExpressRoute gateway are automatically added to the subnet's route table (Correct answer)
- Whether routes are shared between peered VNets
- Whether the subnet can participate in a VPN connection
Correct answer: Whether routes learned from a VPN or ExpressRoute gateway are automatically added to the subnet's route table
Disabling BGP route propagation on a subnet prevents routes learned from VPN or ExpressRoute gateways from being automatically injected into that subnet's effective routes.
Question 2: To implement forced tunneling (routing all internet traffic through on-premises), which UDR configuration is required?
- A route for 0.0.0.0/0 with next hop type VirtualNetworkGateway (Correct answer)
- A route for 10.0.0.0/8 with next hop type Internet
- A route for 0.0.0.0/0 with next hop type VirtualAppliance pointing to a firewall
- A route for 255.255.255.255/32 with next hop type VirtualNetworkGateway
Correct answer: A route for 0.0.0.0/0 with next hop type VirtualNetworkGateway
Forced tunneling uses a default route (0.0.0.0/0) with VirtualNetworkGateway as the next hop to redirect all internet-bound traffic through the on-premises VPN gateway.
Question 3: What is the maximum number of routes allowed per Azure route table?
- 100
- 200
- 400 (Correct answer)
- 1000
Correct answer: 400
Azure route tables support a maximum of 400 routes per table, as documented in Azure's subscription limits and quotas.
Question 4: Which Azure service provides the 'Effective Routes' feature to view all routes applied to a specific network interface?
- Azure Advisor
- Network Watcher (Correct answer)
- Azure Monitor
- Azure Policy
Correct answer: Network Watcher
Azure Network Watcher provides the Effective Routes feature, displaying all system routes and UDRs currently applied to a network interface.
Question 5: When VNet peering is established, what system routes are automatically added?
- Routes for the peered VNet's address space with next hop type VirtualNetwork (Correct answer)
- Routes for the peered VNet's address space with next hop type Internet
- Routes for all Azure services with next hop type VirtualNetwork
- No routes are added automatically; manual UDRs are required
Correct answer: Routes for the peered VNet's address space with next hop type VirtualNetwork
Azure automatically inserts system routes for the peered VNet's address ranges with VirtualNetwork as the next hop, enabling traffic to flow between peered VNets.
Question 6: In which scenario would you explicitly specify the 'VirtualNetworkGateway' next hop type in a UDR?
- When routing traffic to an Azure Firewall instance
- When forcing specific traffic through a particular VPN or ExpressRoute gateway (Correct answer)
- When routing traffic between subnets within the same VNet
- When blocking traffic to specific internet destinations
Correct answer: When forcing specific traffic through a particular VPN or ExpressRoute gateway
The VirtualNetworkGateway next hop type explicitly directs traffic through a VPN Gateway or ExpressRoute Gateway, overriding the automatic gateway selection.
Question 7: What happens to a route table when the subnet it is associated with is deleted?
- The route table is automatically deleted along with the subnet
- The route table remains but the association is removed (Correct answer)
- The routes are moved to the VNet's main route table
- Deletion fails until the association is manually removed first
Correct answer: The route table remains but the association is removed
Route tables are independent resources; deleting a subnet removes the association but the route table persists and can be associated with other subnets.
AZ-800 Azure Route Tables and User-Defined Routes 2
What does the 'BGP route propagation' setting on an Azure subnet control?