AZ-800 Azure Virtual WAN Implementation 5

Question 1

A company has a Virtual WAN deployment and needs to force-tunnel all internet traffic from branch VPN sites through an on-premises firewall. Which configuration achieves this?

Accepted Answer

Enable branch-to-branch on the hub and advertise a default route from on-premises via BGP

Answer

By enabling branch-to-branch and having the on-premises router advertise 0.0.0.0/0 via BGP, all internet traffic from branch sites is routed back through on-premises.

Question 2

A network architect needs to ensure spoke VNets in Virtual WAN can use a third-party NVA for packet inspection instead of Azure Firewall. The NVA is deployed in a spoke VNet. Which approach is supported?

Accepted Answer

Use custom route tables to steer traffic through the NVA spoke VNet via static routes

Answer

Custom route tables with static routes pointing to the NVA's private IP in a spoke VNet allow traffic steering through third-party NVAs in non-hub VNets.

Question 3

When deploying a Virtual WAN hub, which resource is automatically created and managed by Microsoft within the hub virtual network?

Accepted Answer

Microsoft-managed router infrastructure and gateway resources

Answer

Microsoft automatically deploys and manages the hub's router infrastructure, VPN gateways, ExpressRoute gateways, and other networking components inside the hub VNet.

Question 4

An enterprise uses Virtual WAN Standard with 10 hubs globally. They need to limit which spoke VNets can communicate with specific on-premises sites. Which Virtual WAN feature enables this traffic segmentation?

Accepted Answer

Custom routing tables with selective association and propagation

Answer

Custom routing tables allow granular control by defining which connections associate (receive routes from) and propagate (advertise routes to) specific tables, enabling traffic segmentation.

Question 5

A Virtual WAN VPN gateway is configured with active-active mode. What is the primary benefit of this configuration?

Accepted Answer

It doubles the throughput capacity and provides redundancy through two active tunnel endpoints

Answer

Active-active VPN gateway mode provides both higher aggregate throughput and higher availability by maintaining two active BGP/IPsec endpoints simultaneously.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 Azure Virtual WAN Implementation 5