Azure Networking Quiz

Your company has a single on-premises datacenter in Washington DC. The East US Azure region has a peering location in Washington DC. The company only has Azure resources in the East US region. You need to implement ExpressRoute to support up to 1 Gbps. You must use only ExpressRoute Unlimited data plans. The solution must minimize costs. Which type of ExpressRoute circuits should you create?

• ExpressRoute Local

• ExpressRoute Direct

• ExpressRoute Premium

• ExpressRoute Standard

You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by an on-premises Active Directory domain. Which additional service should you deploy to support the VPN authentication?

• an Azure key vault

• a RADIUS server

• a certification authority

• Azure Active Directory (Azure AD) Application Proxy

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure. Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?

• IKEDiagnosticLog

• RouteDiagnosticLog

• GatewayDiagnosticLog

• TunnelDiagnosticLog

You have an Azure virtual network and an on-premises datacenter. You are planning a Site-to-Site VPN connection between the datacenter and the virtual network. Which two resources should you include in your plan?

• a virtual network gateway

• a local network gateway

• a user-defined route

• Azure Web Application Firewall (WAF)

• Azure Firewall

Your company has an on-premises network and three Azure subscriptions named Subscription1, Subscription2, and Subscription3. The departments at the company use the Azure subscriptions as shown in the following table. All the resources in the subscriptions are in either the West US Azure region or the West US 2 Azure region. You plan to connect all the subscriptions to the on-premises network by using ExpressRoute. What is the minimum number of ExpressRoute circuits required?

• 1

• 2

• 3

• 4

• 5

Your company has offices in New York and Amsterdam. The company has an Azure subscription. Both offices connect to Azure by using a Site-to-Site VPN connection. The office in Amsterdam uses resources in the North Europe Azure region. The office in New York uses resources in the East US Azure region. You need to implement ExpressRoute circuits to connect each office to the nearest Azure region. Once the ExpressRoute circuits are connected, the on-premises computers in the Amsterdam office must be able to connect to the on-premises servers in the New York office by using the ExpressRoute circuits. Which ExpressRoute option should you use?

• ExpressRoute FastPath

• ExpressRoute Global Reach

• ExpressRoute Direct

• ExpressRoute Local

You have an Azure subscription that contains a single virtual network and a virtual network gateway. You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Azure Active Directory (Azure AD). What should you configure?

• An enterprise application

• Open VPN (SSL)

You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements. Which two actions should you include in the solution?

• On the peering from Vnet1, select Allow for Traffic forwarded from remote virtual network.

• On the peerings from Vnet2 and Vnet3, select Allow for Traffic forwarded from remote virtual network.

• On the peering from Vnet1, select Use the remote virtual network's gateway or Route Server.

• On the peering from Vnet1, select Allow for Traffic to remote virtual network.

• On the peerings from Vnet2 and Vnet3, select Use the remote virtual network's gateway or Route Server.

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks. You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub. You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution. What should you include in the solution?

• An Azure Virtual WAN ExpressRoute gateway

• A Network Virtual Appliance (NVA)

• A Site to site gateway (VPN gateway)

• A Point to site gateway (User VPN gateway)