Master Azure Load Balancers and Virtual Machines

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

Which of the following is NOT one of the main benefits of using auto scaling?

Availability

Fault tolerance

Network security (correct)

Cost management

What is the mandatory name for the special subnet that VPN gateways always connect to?

ConnectSubnet

SpecialSubnet

GatewaySubnet (correct)

VPNSubnet

How can you connect two V-NETs together using VPN gateways?

Create a VPN gateway in an on-premises network

Create a VPN gateway in a special subnet

Create a VPN gateway in each V-NET (correct)

Create a VPN gateway in one V-NET only

Which connection type enables any on-premises resource to access a V-NET?

Site-to-site VPN Signup and view all the answers

Which connection type provides encrypted communication over the internet between a single PC and the V-NET?

Point-to-site VPN Signup and view all the answers

Which connection type is private and does not traverse the internet?

Azure ExpressRoute Signup and view all the answers

Which option can be used to filter network traffic between subnets in Azure?

All of the above Signup and view all the answers

Where can network security groups be applied in Azure?

Network interfaces or to a full subnet Signup and view all the answers

What type of traffic do network security groups work for?

Traffic within a V-NET Signup and view all the answers

What should be considered when troubleshooting network issues related to network security groups?

Misconfigured network security groups may block or allow unwanted traffic Signup and view all the answers

Which type of load balancer is recommended because it includes additional features like H-A ports and HTTPS health probes?

Standard load balancer Signup and view all the answers

Which type of load balancer can load balance traffic across multiple availability zones?

Standard load balancer Signup and view all the answers

Which type of load balancer can load balance only inside the availability zone?

Basic load balancer Signup and view all the answers

What is the Azure feature that prevents destination NAT from being translated and requires the destination VM to reply directly to the source IP-address?

Direct server returns Signup and view all the answers

What does Auto Scaling allow you to do in terms of the number of FortiGate VMs?

Dynamically grow and shrink Signup and view all the answers

What are the benefits of using Auto Scaling?

Fault tolerance, availability, and cost management Signup and view all the answers

What can you add to the back-end pool members of a load balancer?

VMs, scale sets, or availability sets Signup and view all the answers

What is the purpose of a virtual machine scale set (VMSS)?

To dynamically grow and shrink a group of FortiGate VMs Signup and view all the answers

What is the recommended type of load balancer for applications?

External/public load balancer Signup and view all the answers

What is the recommended type of load balancer for the database subnet?

Internal load balancer Signup and view all the answers

Study Notes

Autoscaling and Load Balancing

Autoscaling allows you to automatically increase or decrease the number of FortiGate VMs based on demand.
Benefits of using Autoscaling include:
- Reduced administrative burden
- Increased application availability
- Cost savings
Autoscaling is not suitable for applications that require a fixed number of instances.

VPN Gateways and Connections

A VPN gateway always connects to a special subnet called the "GatewaySubnet".
To connect two V-NETs together using VPN gateways, a VPN connection is established between the two gateways.
ExpressRoute connections enable any on-premises resource to access a V-NET.
Point-to-Site (P2S) VPN connections provide encrypted communication over the internet between a single PC and the V-NET.
Site-to-Site (S2S) VPN connections are private and do not traverse the internet.

Network Security Groups (NSGs)

Network Security Groups can be applied to subnets, NICs, and individual VMs.
NSGs work for inbound and outbound traffic.
When troubleshooting network issues related to NSGs, consider the NSG rules, the security group configuration, and the network configuration.

Load Balancers

Application Gateway is a type of load balancer that includes additional features like H-A ports and HTTPS health probes.
Azure Load Balancer can load balance traffic across multiple availability zones.
Basic Load Balancer can load balance only inside the availability zone.
The Azure feature that prevents destination NAT from being translated and requires the destination VM to reply directly to the source IP-address is called "Floating IP".

Virtual Machine Scale Sets (VMSS)

A Virtual Machine Scale Set (VMSS) allows you to create and manage a group of identical VMs.
The purpose of a VMSS is to provide high availability and scalability for applications.

Load Balancer Back-end Pool Members

You can add VMs, VMSS, or availability sets to the back-end pool members of a load balancer.

Recommended Load Balancers

Application Gateway is the recommended type of load balancer for applications.
Azure Load Balancer is the recommended type of load balancer for the database subnet.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Description

Test your knowledge on Azure Load Balancers and Virtual Machines. Learn about different types of load balancers and their capabilities, such as standard load balancers that can balance traffic across multiple availability zones. Find out why it is recommended to use standard load balancers for additional features like H-A ports and HTTPS healing.