Topic 4 Summary Notes

Play an AI-generated podcast conversation about this lesson

What is the purpose of Azure VNets?

Azure VNets are isolated networks using a private IP address space.

What are subnets used for in Azure Virtual Networks?

Subnets allow you to isolate workloads within Azure Virtual Networks.

Which IP addresses does Azure reserve in each subnet?

Azure reserves the first 4 and last IP address in each subnet.

How is the first IP address allocated to a VM in Azure typically?

The first IP address allocated to a VM is typically the .4 IP address. Signup and view all the answers

How are private IP addresses assigned to VMs in Azure?

Private IP address for a VM is assigned from a subnet and configured as settings on the IP configuration of a network interface resource. Signup and view all the answers

What is the role of User-Defined Routes (UDRs) in Azure?

UDRs change the default behavior of subnets, allowing you to direct outbound traffic to other locations. Signup and view all the answers

When is IP forwarding on the NIC of a virtual appliance required in Azure?

If a UDR is used to send traffic to a virtual appliance, IP forwarding must be enabled on the NIC of the virtual appliance VM. Signup and view all the answers

What are the two pricing tiers supported by Public IP addresses in Azure?

Public IP addresses support Basic and Standard tiers. Signup and view all the answers

What is the main difference between Basic and Standard tiers of Public IP addresses in Azure?

Basic tier supports dynamic and static assignment with open connectivity, while the Standard tier supports zone-redundant deployments, uses static allocation only, and is closed by default. Signup and view all the answers

How are dynamic IP addresses managed when a VM is stopped in Azure?

Dynamic IP addresses are released when the VM is stopped. Signup and view all the answers

What is the term used to describe routing outbound Internet traffic via a VPN connection to a network security device?

Forced tunneling Signup and view all the answers

How can two VNets be connected if they have non-overlapping IP address spaces?

VNet peering or VNet-to-VNet VPN connections Signup and view all the answers

What is the term used to describe limiting connectivity between peered VNets using NSG rules?

Service chaining Signup and view all the answers

In a hub-and-spoke network architecture, what type of virtual network is typically used by each application?

Spoke VNet Signup and view all the answers

What subnet is specifically used for virtual network gateways in Azure?

GatewaySubnet Signup and view all the answers

What setting must be enabled on VNet peering connections to allow routing through a VPN gateway?

Allow Gateway Transit Signup and view all the answers

What is the special record name used in Azure DNS for records at the zone apex?

@ Signup and view all the answers

What type of DNS records in Azure DNS allow referencing other Azure resources such as public IP addresses?

Alias records Signup and view all the answers

What tool can be used to help identify the required NSG rules for network security?

Service map and NSG flow logs Signup and view all the answers

Which managed service in Azure provides network security with out-of-the-box features?

Azure Firewall Signup and view all the answers

What is the subnet where Azure Bastion is provisioned?

AzureBastionSubnet Signup and view all the answers

At which OSI layer does Azure Application Gateway operate?

Layer 7 Signup and view all the answers

What type of traffic does Azure Load Balancer (ALB) manage?

TCP and UDP Signup and view all the answers

What does ALB support in terms of frontend IP addresses?

Public (Internet) or private (Intranet) Signup and view all the answers

What are the two pricing tiers for ALB?

Standard and Basic Signup and view all the answers

What does IP Flow Verify in Network Watcher test?

If a given network flow is allowed in or out of an Azure VM Signup and view all the answers

What does Packet Captures in Network Watcher enable you to do?

Capture network traffic on a given VM Signup and view all the answers

What does Connection Troubleshoot in Azure help you test?

The connectivity between two Azure VMs or between a VM and an external endpoint Signup and view all the answers

What is the purpose of Site-to-Site VPN connections?

To provide connectivity between an on-premises network and an Azure virtual network Signup and view all the answers

What type of connections does ExpressRoute provide?

Dedicated connection from a connectivity provider Signup and view all the answers