AZ-800 ExpressRoute Circuit Configuration 3 — Questions and Answers
Question 1: You need to configure ExpressRoute for a circuit that requires 10 Gbps bandwidth. Which ExpressRoute circuit SKU family supports this bandwidth?
- Standard SKU with metered billing only
- Premium SKU with unlimited billing only
- ExpressRoute Direct only (Correct answer)
- Both Standard and Premium SKUs
Correct answer: ExpressRoute Direct only
ExpressRoute Direct is required for bandwidths of 10 Gbps and 100 Gbps, as standard provider circuits only go up to 10 Gbps but require Direct for native 10G port access.
Question 2: Which routing attribute determines the preferred path when multiple ExpressRoute circuits are available for outbound traffic from Azure to on-premises?
- BGP MED (Multi-Exit Discriminator) (Correct answer)
- BGP Local Preference
- BGP AS Path Length
- BGP Weight
Correct answer: BGP MED (Multi-Exit Discriminator)
Azure uses the BGP MED attribute to prefer paths when routing outbound traffic across multiple ExpressRoute circuits to on-premises networks.
Question 3: An administrator needs to allow a virtual network in a different subscription to use an ExpressRoute circuit. What must be configured on the circuit first?
- ExpressRoute Global Reach
- A circuit authorization (Correct answer)
- A second peering type
- A route filter
Correct answer: A circuit authorization
A circuit authorization generates a key that can be redeemed in another subscription to create a connection to the ExpressRoute circuit.
Question 4: What is the purpose of configuring a route filter on an ExpressRoute Microsoft peering connection?
- To limit the bandwidth used by specific services
- To select which Microsoft cloud services' BGP communities are advertised to your network (Correct answer)
- To block specific on-premises prefixes from reaching Azure
- To configure QoS policies for different traffic types
Correct answer: To select which Microsoft cloud services' BGP communities are advertised to your network
Route filters on Microsoft peering allow you to select which BGP community-tagged service prefixes (like Office 365 or Azure PaaS) are advertised to your on-premises network.
Question 5: You configure ExpressRoute private peering with a /29 subnet for the primary link. Azure uses the first usable IP and your router uses the second. What subnet size does Microsoft actually recommend for these links?
- /32 point-to-point links
- /30 subnets (Correct answer)
- /28 subnets
- /27 subnets
Correct answer: /30 subnets
Microsoft recommends /30 subnets for ExpressRoute primary and secondary link configurations, providing exactly two usable host addresses.
Question 6: An ExpressRoute circuit uses the Premium add-on. How many VNets in the same geopolitical region can be linked to this circuit compared to Standard?
- Premium doubles the Standard limit
- Premium allows up to 10 VNets vs Standard's 4
- Premium allows up to 10-100 VNets depending on circuit bandwidth vs Standard's 10 (Correct answer)
- Premium and Standard have the same VNet limits
Correct answer: Premium allows up to 10-100 VNets depending on circuit bandwidth vs Standard's 10
ExpressRoute Premium allows 10 to 100 VNet links depending on circuit bandwidth (10 Gbps = 100 VNets), while Standard allows up to 10 VNets.
Question 7: Which ExpressRoute feature allows you to encrypt traffic over the private peering connection end-to-end without relying on the provider's security?
- ExpressRoute FastPath
- MACsec on ExpressRoute Direct
- ExpressRoute Global Reach encryption
- Azure VPN over ExpressRoute (Correct answer)
Correct answer: Azure VPN over ExpressRoute
Configuring a Site-to-Site VPN over ExpressRoute private peering provides end-to-end IPsec encryption that is independent of the provider.
AZ-800 ExpressRoute Circuit Configuration 3
You need to configure ExpressRoute for a circuit that requires 10 Gbps bandwidth.
Which ExpressRoute circuit SKU family supports this bandwidth?