Skill 4.5 integrate an On-Premises Network for Azure Virtual Network

Question 1

Describe Virtual Network Gateways

Answer 1

Allows you to create connections from your virtual network to other networks. When creating a gatway you must specify if it will be used for VPN connections or express route connections. Virtual Network Gatway used for VPN connections is called a VPN gateway while those used for expressroutes are ExpressRoute gateways

Question 2

Describe VPN gateways

Answer 2

can be deployed to a dedicated gateway subnet within the VNet. VPN gateway is implemented using Azure Virtual Machine. Minimum gateway size of /29 with a recommended gateway size of /27

Question 3

Describe the VPN gateway pricing tiers

Answer 3

Basic – 10 Max site-to-site connections throughput of 1–Mbps
VpnGw1 and VpnGw1Az – 30 max site-to-site connections throughout of 650 Mbps
VpnGW2 and VpnGW2Az – 30 max site-to-site VPN connections throughput of 1Gbps
VpnGw3 and VpnGw3Az – 30 max site-to-site VPN connections. Throughput of 1.25 GBPS

Question 4

What tiers are required to resize a gateway

Answer 4

VpnGw1, VpnGW2, and VPNGW3

Question 5

How is a VPN gateway deployed by default

Answer 5

each VPN gateway is deployed as two VMs in a active-standby configuration. To reduce downtime in the event the active instance fails and active-active configuration can also be used in active-active both gateways have their own public IP addresses.

Question 6

What is required for Dual on-premises VPN gateways to be used

Answer 6

BGP must be enabled and works in an active-standby or active-active VPN gateways.

Question 7

What must you do before creating a VPN gateway

Answer 7

create the gateway subnet

Question 8

Describe ExpressRoute

Answer 8

secure and reliable private connection between your on-premises networ and the Microsoft cloud. The connection is provided mostly by a third-party netowrk provider who has partnered with Microsoft to offer this Service

It provides connectivity to all Microsoft Cloud Services, unlike a site-to-site VPN which only provies connectivity to your Azure VNet

Question 9

ExpressRoute Connectivity Models

Answer 9

–If your network already has a presence at a co-location facility with a cloud exchange your co-location provider can establish a virtual cross-connection with the Microsoft Cloud. This provides either a layer 2 or a managed layer 3 connection

– Your connectivity provider may be able to provide a point-to-point etherenet connection from their network to your on-premises netowrk. Also provides either a layer 2 or managed layer 3 connection
– You’re existing IPVPN WAN provider may be able to integrate ExpressRoute into your WAN. If they are registered as an ExpressRoute provider.

Question 10

What is each ExpressRoute circuit identified by

Answer 10

A GUID called a service key (s-key) which is shared with your connectivity provider. Each cicuit has a fixed bandwidth and a specfic peering location

Question 11

What are ExpressRoute Bandwidth options

Answer 11

50mbps
100Mbps
200Mbps
500mbps
1gbps
2gbps
5gbps
10gbps

Question 12

Describe ExpressRoute Metered Bandwidth

Answer 12

All inbound data transfer is free of charge and all outbound data transfer is charged based on a predetermined rate. Users are also cahrged based on a predetermined rate. Users are also charged a fixed monthly port fee

Question 13

What are the two peering options for ExpressRoute Circuits

Answer 13

Azure Private Peering
Microsoft Peering

Question 14

Describe ExpressRoute Azure private peering

Answer 14

Provides connectivity over the intranet address space into your Azure Virtual Network. This peering is considered a trusted extension of your network

Question 15

Describe ExpressRoute Microsoft Peering

Answer 15

Provides connectivity over the Internet address space into Microsoft services such as Office 365 and internet facing endpoints of Azure PaaS

Question 16

Describe Azure Public peering

Answer 16

used for older circuits adn provides connectivity to Azure PaaS services only

Question 17

Describe the ExpressRoute Premium add-on

Answer 17

Allows you to extend the connectivity to all Microsoft Data centers worldwide. This add-on also raises the number of routes permitted for teh Azure private peering 4000 - 10000. It also increases the number of virtual networks that can be connected to each epressroute circuit from 10 to 20 and 100 depending on the bandwidth

Question 18

When does billing for an expressroute circuit begin

Answer 18

Upon creation and does not depend on completing the configuration with the provider

Question 19

How are virtual networks connected to expressroute circuits

Answer 19

Using ExpressRoute Gateway. An ExpressRoute Gateway is a virtual network gateway, created with the Express routing option. Must be created in teh gateway of the subnet.

Question 20

Describe Azure Virtual WAN

Answer 20

combination of many networking ,security, and routing functionalities together to provide a single operational interface for various networking solutions.
Azure Virtual WAN facilitates point-to-point, site-to-site, expressroute connectivity, and Azure firewall configuration all in one place

Question 21

What is the minimum size of a subnet

Answer 21

/29

Question 22

What is the minimum throughput that can be allocated to an Azure Virtual Wan Hub.

Answer 22

2x 500 Mbps is the minimum throughput that can be allocated.