Azure Virtual Networks Flashcards by Patrick Arkley

What is an ASG?

Azure Application Security Groups allows you to configure the network security as a natural extension of the structure of an application. This allows you to group VMs and define network security policies based on those groups.

How well did you know this?

Not at all

Perfectly

What dose NSG stand for?

Network Security Group

How well did you know this?

Not at all

Perfectly

What is an NSG?

NSG is a Network Security Group which is used to manage the ingoing and outgoing network traffic to an Azure resources like VMs, Web Applications, etc.

How well did you know this?

Not at all

Perfectly

What dose ASG stand for?

Application Security Groups

How well did you know this?

Not at all

Perfectly

What is Vnet Peering

This is used to connect different Vnets together

How well did you know this?

Not at all

Perfectly

How to create subnet using Powershell

Net-AzVirtualNetworkSubnetConfig

How well did you know this?

Not at all

Perfectly

How to create Vnet using Powershell

Net-AzVitualNetwork

How well did you know this?

Not at all

Perfectly

How to create a public ip using Powershell

New-AzPublicIpADdress

How well did you know this?

Not at all

Perfectly

How to create network security group using Powershell

New-AzNetworkSecurityGroup

How well did you know this?

Not at all

Perfectly

How to create a network security rule using Powershell

New-AzNetworkSecurityRuleConfig

How well did you know this?

Not at all

Perfectly

How to create network interface using Powershell

New-AzNetworkInterface

How well did you know this?

Not at all

Perfectly

What is a user-defined routes?

User-Defined Routes allow you to define custom routing tables to control the flow of network traffic within your Azure virtual networks.

How well did you know this?

Not at all

Perfectly

What is a benefit to having Vnet Service Endpoints

This will enhance the security of your Azure Service Resources by securely connecting them to the Vnet. This will also completely remove internet access to the resource, only allowing access via your Vnet.

How well did you know this?

Not at all

Perfectly

What is Azure Alerts?

Azure Alerts will monitor device status and sent alerts to IT Admins when the alert has been trigged

How well did you know this?

Not at all

Perfectly

What is a Azure Load Balancer?

This is used to distribute incoming traffic to backend VMs. This operates at layer 4 of the OSI model.

How well did you know this?

Not at all

Perfectly

What are the different components of Azure Load Balancers

Azure Load Balancer
Backend VMs
Frontend IP config
Backend pool
Health probe
Load balancing rules

How well did you know this?

Not at all

Perfectly

What are the two Azure Load Balancer SKU’s

Basic Load Balancer
Standard Load Balancer

How well did you know this?

Not at all

Perfectly

What is the frontend IP config?

This is the IP address assigned to the load balancer. If you need load balance from the internet you can use public IP.

How well did you know this?

Not at all

Perfectly

What is the backend pool?

This is the pool of VMs that the load balancers will distribute the traffic accross.

How well did you know this?

Not at all

Perfectly

What is the health probe?

The health probe is to monitor the backend VMs to make sure they are healthy before the load balancer will send traffic towards it.

What are load balancing rules?

These are rules used to map the traffic from the user to the backend VMs

What are the benefits to using a basic load balancer?

This can support up to 300 instances in the backend pool
The backend VMs can be in an availability set or scale set
Health probes can only be TCP or HTTP
No SLA

What are the benefits to using a standard load balancer?

This can support up to 1000 instances in the backend pool
The backend pool can contain any VM or VM scale set in a Vnet
Health probes can only be TCP, HTTP or HTTPs
SLA of 99.99%

What is a public load balancer?

This is a load balancer is getting incoming traffic from the internet using a public IP

What is a internal load balancer?

This is a load balancer that is getting incoming traffic from within a Vnet using a private IP.

What are NAT rules used for?

NAT rules are used to allow users to use protocols like RDP into VMs via load balancer

What is the Application Gateway Service?

Application Gateway is a web traffic load balancer working at the application layer meaning you can have multiple backend pools. The example below show the application gateway with and image pool and video pool for a website.

Azure Application Gateway Service vs Azure Load Balancer

- Azure Load Balancer works at layer 4 of the OSI model - Azure Application Gateway Service works at layer 7 of the OSI model

How is routing decisions made with Application Gateway?

These are made with HTTP request in an URL like paths or host headers. For example www.google.com/images or www.google.com/videos

Benefits for Application Gateways?

- SSL/TLS termination which can allow you to configure secure connections to be processed by the application gateway resource. - Requests can flow normal to the backend VMs. - Reduces the work for the backend VMs. - Web application firewall - URL-based routing - Multiple-site hosting

What dose Application Gateway Standard_v2 SKU include?

- Autoscaling which allows the service to scale based on load patters. - Zone redundancy to destitute across multiple availability zones for better availability.

What does NAT mean in Azure Networking?

Network Address Translation

What is Azure DNS?

This is a hosting service for DNS domains. This helps in providing name resolution by using MS Azure Infrastructure

What is the purpose of the Azure DNS service

The Azure DNS service is used when

What is a DNS Zone?

This will represent your domain name in the Azure DNS services

What is the Azure Network Watcher service?

The service provides a set of tools that can be used to monitor, diagnose, view metrics and logs for resources in an Azure virtual network

What are the tools used in the Azure Network Watcher Service?

Connection Monitor IP Flow Verify Next hop Packet Capture

What is the Connection Monitor tool?

This is used to monitor the communications between endpoints This can be one of the following: - VM - Domain Name - Uniform Resource Identifier (URI) - IPv4 address

What is the IP Flow Verify tool?

This is used to check for any communication issues from a VM perspective that might be caused by NSGs

What is the Next Hop tool?

This can help diagnose any issues when it comes to the routing of traffic from Azure VM. This can tell you what the next hop to a destination from an VM.

What is the Packet Capture tool?

This can be used to capture the actual network packets sent to and from a VM

What is a point to site VPN

A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer

What are two methods that a user can authenticate to a P2S VPN?

Certificate authentication Microsoft Entra authentication On-prem RADIUS server

What is Certificate authentication (regarding P2S VPN)

A client certificate is a trusted root certificate installed on each client computer. Which is is used to authenticate the connecting user.

What is Microsoft Entra authentication (regarding P2S VPN)

Microsoft Entra authentication allows users to connect to Azure using their Microsoft Entra credentials

What is service endpoints

A service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network

What is required to create a Vnet-to-Vnet VPN between two VNs?

Gateway subnet

When can a network peering connection can be established?

Across different regions, resources groups and even subscriptions

What is Azure Virtual Network Service Endpoints?

you can add a virtual network rule to secure the Azure service resources to your virtual network