AZ-800 ExpressRoute Circuit Configuration 2 — Questions and Answers
Question 1: An organization wants to connect to Azure using ExpressRoute but needs the connection to traverse the public internet for the last mile. Which ExpressRoute connectivity model should they choose?
- ExpressRoute Direct
- CloudExchange Co-location
- Point-to-Point Ethernet Connection
- Any-to-Any (IPVPN) Connection (Correct answer)
Correct answer: Any-to-Any (IPVPN) Connection
Any-to-Any (IPVPN) connections integrate your WAN with Azure through a network service provider, allowing connectivity via the existing WAN infrastructure.
Question 2: What is the maximum number of ExpressRoute circuits that can be linked to a single ExpressRoute gateway in the same virtual network?
- 2
- 4 (Correct answer)
- 8
- 16
Correct answer: 4
A single ExpressRoute virtual network gateway can be connected to a maximum of 4 ExpressRoute circuits.
Question 3: You need to configure ExpressRoute Global Reach to allow two on-premises networks to communicate through Azure. What is a prerequisite for this configuration?
- Both circuits must use the same bandwidth SKU
- Both circuits must be in the same ExpressRoute peering location
- Both circuits must have Azure private peering configured (Correct answer)
- Both circuits must be connected to the same ExpressRoute provider
Correct answer: Both circuits must have Azure private peering configured
ExpressRoute Global Reach requires Azure private peering to be configured on both circuits before it can be enabled.
Question 4: Which BGP community value is used to identify Azure public IP prefixes from a specific Azure region when filtering ExpressRoute Microsoft peering routes?
- 12076:5010
- 12076:5020
- 12076:51001 + region-specific value (Correct answer)
- 65000 + region number
Correct answer: 12076:51001 + region-specific value
Microsoft uses the BGP community value 12076:51001 along with a region-specific value to tag routes for Azure public IPs by region.
Question 5: An ExpressRoute circuit is provisioned but the status shows 'Provider: Not Provisioned'. What does this indicate?
- Azure has not yet allocated the circuit resources
- The connectivity provider has not yet completed their side of provisioning (Correct answer)
- The virtual network gateway has not been connected
- BGP sessions have not been established
Correct answer: The connectivity provider has not yet completed their side of provisioning
When the provider status shows 'Not Provisioned,' it means the connectivity provider has not yet configured their edge devices for the circuit.
Question 6: You are configuring ExpressRoute Microsoft peering and need to advertise routes for Office 365 services. Which IP address space must you provide for the primary and secondary links?
- Any private IP range from RFC 1918
- Public IP addresses owned by your organization (Correct answer)
- Any /30 subnet from the 169.254.0.0/16 range
- IPv6 addresses from your ISP allocation
Correct answer: Public IP addresses owned by your organization
Microsoft peering requires you to use public IP addresses that you own and have registered with a routing registry for the primary and secondary link subnets.
Question 7: What happens to ExpressRoute circuits when an Azure subscription is moved to a different Azure AD tenant?
- Circuits continue to function without any changes
- Circuits are automatically re-provisioned in the new tenant
- Circuit authorization keys become invalid and connections break (Correct answer)
- Circuits are deleted and must be recreated
Correct answer: Circuit authorization keys become invalid and connections break
Moving a subscription to a different Azure AD tenant invalidates ExpressRoute circuit authorization keys, breaking any cross-subscription connections.
AZ-800 ExpressRoute Circuit Configuration 2
An organization wants to connect to Azure using ExpressRoute but needs the connection to traverse the public internet for the last mile.
Which ExpressRoute connectivity model should they choose?