AZ-700 Practice Questions

To ensure that hosts on VNET1 and VNET2 can communicate with minimal latency, you can use  Virtual Network Peering . This method connects the two virtual networks directly through the Microsoft backbone network, ensuring low-latency and high-bandwidth communication.

Step-by-Step Solution

Step 1: Set Up Virtual Network Peering

Navigate to the Azure Portal .

Search for “Virtual networks”  and select VNET1.

In the left-hand menu , select  “Peerings”  under the “Settings” section.

Click on “Add”  to create a new peering.

Enter the following details :

Name : Enter a name for the peering (e.g., VNET1-to-VNET2).

Peer virtual network : Select VNET2.

Allow virtual network access : Ensure this is enabled.

Allow forwarded traffic : Enable if needed.

Allow gateway transit : Enable if needed.

Click on “Add” .

Step 2: Configure Peering on VNET2

Navigate to VNET2  in the Azure Portal.

In the left-hand menu , select  “Peerings”  under the “Sett ings” section.

Click on “Add”  to create a new peering.

Enter the following details :

Name : Enter a name for the peering (e.g., VNET2-to-VNET1).

Peer virtual network : Select VNET1.

Allow virtual network access : Ensure this is enabled.

Allow forwarded traffic : Enable if needed.

Allow gateway transit : Enable if needed.

Click on “Add” .

Explanation

Virtual Network Peering : This feature connects two virtual networks in the same or different regions, allowing resources in both networks to communicate with each othe r as if they were part of the same network.  Th e traffic between peered virtual networks uses the Micros oft backbone infrastructure, ensuring low la tency and hi gh bandwidth 1 2 .

Allow Virtual Network Access : This setting ensures that the virtual networks can communicate with each other.

Allow Forwarded Traffic : This setting allows traffic forwarded from a network security appliance in the peered virtual network.

Allow Gateway Transit : This setting allows the peered virtual network to use the gateway in the local virtual network.

By following these steps, you can ensure that hosts on VNET1 and VNET2 can communicate with minimal latency, leveraging the high-speed Microsoft backbone network.

To provide a single host name that routes traffic based on the origin, you can use  Azure Traffic Manager . This service allows you to route traffic to different endpoints based on various routing methods, i ncluding geographic routing.

Navigate to the Azure Portal .

Search for “Traffic Manager profiles”  and select it.

Click on “Create” .

Enter the following details :

Name : Enter a name for the Traffic Manager profile (e.g.,  ContosoTrafficManager ).

Routing method : Select  Geographic .

Subscription : Select your subscription.

Resource group : Select an existing resource group or create a new one.

Resource group location : Choose a location (this does not affect the routing).

Click on “Create” .

Navigate to the newly created Traffic Manager profile .

Select “Endpoints”  from the left-hand menu.

Click on “Add”  to add a new endpoint.

Enter the following details :

Type : Select  Exter nal endpoint .

Name : Enter a name for the endpoint (e.g.,  NewYorkEndpoint ).

FQDN : Enter  ny.contoso.com .

Geographic region : Select  “World”  (this will be adjusted later).

Click on “Add”  to save the endpoint.

Repeat the process  to add the second endpoint:

Type : Select  External endpoint .

Name : Enter a name for the endpoint (e.g.,  GermanyEndpoint ).

FQDN : Enter  de.contoso.com .

Geographic region : Select  Europe .

Navigate to the Traffic Manager profile .

Select “Configuration”  from the left-hand menu.

Under “Geographic routing” , adjust the regions:

For the  GermanyEndpoint , ensure that the geographic region is set to  Europe .

For the  NewYorkEndpoint , ensure that the geographic region is set to  World  (excluding Europe).

Use a DNS query tool  to test the routing.

From a location in Germany , query the Traffic Manager profile’s DNS name and ensure it resolves to  de.contoso.com .

From a location outside Europe , query the Traffic Manager profile’s DNS name and ensure it resolves to  ny.contoso.com .

Azure Traffic Manager : This service uses DNS to direct client requests to the most appropriate endpoint based on the routing method you choose. Geographic routing ensures that traffic is directed based on t he origin of the request.

Geographic Routing : This method allows you to route traffic based on the geographic location of the DNS query origin, ensuring that users are directed to the nearest or most appropriate endpoint.

Step-by-Step Solution Step 1: Create a Traffic Manager Profile Step 2: Configure Endpoints Step 3: Adjust Geographic Routing Step 4: Test the Configuration Explanation By following these steps, you can provide a single host name that routes traffic to  de.contoso.com  for users in Germany and to  ny.contoso.com  for users from other locations, ensuring efficient and appropriate traffic management.

Box 1: VM2, VM3 and VM4.

VM1 is in VNet1/Subnet1. VNet1 is peered with VNet2 and VNet3.

There are no NSGs blocking outbound ICMP from VNet1. There are no NSGs blocki ng inbound ICMP to VNet1/Subnet2, VNet2 or VNet3. Therefore, VM1 can ping VM2 in VNet1/Subnet2, VM3 in VNet2 and VM4 in VNet3.

Box 2:

VM4 is in VNet3. VNet3 is peered with VNet1 and VNet2. There are no NSGs blocking outbound ICMP from VNet3. There are no NSGs blocking inbound ICMP to VNet1/Subnet1, VNet1/Subnet2 or VNet2 from VNet3 (NSG10 blocks inbound ICMP from VNet4 but not from VNet3). Therefore, VM4 can ping VM1 in VNet1/Subnet1, VM2 in VNet1/Subnet2 and VM3 in VNet2.

To archive all the metrics of VNET1 to an existing storage account, you can use Azure Monitor’s diagnostic settings. Here’s how you can do it:

Step-by-Step Solution

Step 1: Navigate to VNET1 in the Azure Portal

Ope n the Azure Portal .

Search for “Virtual networks”  and select  VNET1  from the list.

Step 2: Configure Diagnostic Settings

In the VNET1 blade , select  “Diagnostic settings”  under the “Monitoring” section.

Click on “Add diagnostic setting” .

Step 3: Set Up the Diagnostic Setting

Enter a name  for the diagnostic setting (e.g., VNET1-Metrics-Archive).

Select the metrics  you want to archive. You can choose from various metrics like TotalBytesReceived, TotalBytesSent, etc.

Under “Destination details” , select  “Archive to a storage account” .

Choose the existing storage account  where you want to archive the metrics.

Configure the retention period  if needed.

Step 4: Save the Configuration

Review your settings  to ensure everything is correct.

Click on “Save”  to apply the diagnostic setting.

Explanation

Diagnostic Settings : These allow you to collect and route metrics and logs from your Azure resources to various destinations, including storage accounts, Log Analytics workspaces, and Event Hubs.

Metrics : Metrics provide num erical data about the performance and health of your resources. Archiving these metrics helps in long-term analysis and compliance.

Storage Account : Using an existing storage account ensures that the metrics are stored securely and can be accessed for futu re analysis.

By following these steps, you can ensure that all the metrics of VNET1 are archived to your existing storage account, enabling you to monitor and analyze the performance and health of your virtual network over time.

To deploy Azure virtual machines to the France Central region and ensure they are in a network segment with an IP address range of 10.5.1.0/24, follow these steps:

Step-by-Step Solution

Step 1: Create a Virtual Network in France Central

Navi gate to the Azure Portal .

Search for “Virtual networks”  in the search bar and select it.

Click on “Create” .

Enter the following details :

Subscription : Select your subscription.

Resource Group : Select an existing resource group or create a new one.

Name : Enter a name for the virtual network (e.g., VNet-FranceCentral).

Region : Select  France Central .

Click on “Next: IP Addresses” .

Step 2: Configure the Address Space and Subnet

In the IP Addresses tab , enter the address space as 10.5.1.0/24.

Click on “Add sub net” .

Enter the following details :

Subnet name : Enter a name for the subnet (e.g., Subnet-1).

Subnet address range : Enter 10.5.1.0/24.

Click on “Add” .

Click on “Review + create”  and then  “Create” .

Step 3: Deploy Virtual Machines to the Virtual Network

Navi gate to the Azure Portal .

Search for “Virtual machines”  in the search bar and select it.

Click on “Create”  and then  “Azure virtual machine” .

Enter the following details :

Subscription : Select your subscription.

Resource Group : Select the same resource group used for the virtual network.

Virtual machine name : Enter a name for the VM.

Region : Select  France Central .

Image : Select the desired OS image.

Size : Select the appropriate VM size.

Click on “Next: Disks” , configure the disks as needed, and then click on  “Next: Networking” .

In the Networking tab , select the virtual network (VNet-FranceCentral) and subnet (Subnet-1) created earlier.

Complete the remaining configuration steps  and click on  “Review + create”  and then  “Create” .

Explanation

Virtual Network : A vi rtual network in Azure allows you to create a logically isolated network that can host your Azure resources.

Address Space : The address space 10.5.1.0/24 ensures that the VMs are in a specific network segment.

Subnet : Subnets allow you to segment the virtu al network into smaller, manageable sections.

Region : Deploying the virtual network and VMs in the France Central region ensures that the resources are physically located in that region.

By following these steps, you can ensure that your Azure virtual machines in the France Central region are deployed within the specified IP address range of 10.5.1.0/24.