AZ-800 Azure Virtual WAN Implementation 2 — Questions and Answers
Question 1: A company needs to connect 50 branch offices to Azure using Virtual WAN. Which Virtual WAN type supports both Site-to-Site VPN and ExpressRoute connectivity?
- Basic
- Standard (Correct answer)
- Premium
- Enterprise
Correct answer: Standard
Standard Virtual WAN supports Site-to-Site VPN, Point-to-Site VPN, ExpressRoute, and VNet-to-VNet transit routing.
Question 2: When configuring a Virtual WAN hub, what is the minimum address space required for the hub virtual network?
- /24 (Correct answer)
- /26
- /27
- /28
Correct answer: /24
A Virtual WAN hub requires a minimum /24 address space to accommodate the hub's internal infrastructure components.
Question 3: A network engineer wants to enable inter-hub routing in Azure Virtual WAN. Which feature must be configured to allow traffic to flow between two hubs in different regions?
- Global VNet peering
- Hub routing intent (Correct answer)
- BGP peering
- VPN Gateway transit
Correct answer: Hub routing intent
Hub routing intent configures the hub's routing policies and enables traffic flow between connected hubs across regions.
Question 4: Your organization uses Azure Virtual WAN and needs branch offices to communicate with each other without routing through Azure. Which routing configuration achieves this?
- Default route propagation
- Branch-to-branch connectivity enabled on the hub (Correct answer)
- Custom route tables with static routes
- BGP route filtering
Correct answer: Branch-to-branch connectivity enabled on the hub
Enabling branch-to-branch connectivity on the Virtual WAN hub allows site-to-site and ExpressRoute connections to exchange routes with each other.
Question 5: An administrator deploys Azure Firewall in a Virtual WAN secured hub. What happens to the hub's routing behavior by default after Firewall deployment?
- All traffic is automatically routed through the firewall
- Routing remains unchanged until routing intent is configured (Correct answer)
- Only internet-bound traffic is inspected
- Branch-to-branch traffic is blocked
Correct answer: Routing remains unchanged until routing intent is configured
Deploying Azure Firewall in a hub does not change routing by default; routing intent must be explicitly configured to steer traffic through the firewall.
Question 6: A company wants to use Virtual WAN with ExpressRoute. Which ExpressRoute circuit SKU is required to connect to a Virtual WAN hub?
- Local
- Standard
- Premium
- Both Standard and Premium (Correct answer)
Correct answer: Both Standard and Premium
Both Standard and Premium ExpressRoute circuit SKUs can connect to a Virtual WAN hub, with Premium required for global reach across geopolitical regions.
Question 7: In Azure Virtual WAN, what is the purpose of the 'defaultRouteTable' associated with each hub?
- It stores static routes for on-premises networks
- It is the default routing table where connections propagate and associate routes (Correct answer)
- It defines BGP communities for route filtering
- It contains only internet default routes
Correct answer: It is the default routing table where connections propagate and associate routes
The defaultRouteTable is the standard routing table in a Virtual WAN hub where connections associate and propagate their routes by default.
AZ-800 Azure Virtual WAN Implementation 2
A company needs to connect 50 branch offices to Azure using Virtual WAN.
Which Virtual WAN type supports both Site-to-Site VPN and ExpressRoute connectivity?