Public IP addresses in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ service_behavior

intermediate

Understanding Azure Public IP Address Allocation

In Azure, when you create a Public IP address resource, what is the difference between Static and Dynamic allocation methods?

A Static allocation means the IP address is only available during business hours, Dynamic allocation is available 24/7.

B Static allocation assigns an IP address from a pool shared by all users, while Dynamic allocation assigns a unique IP address permanently.

C Static allocation automatically changes the IP address daily, Dynamic allocation keeps the same IP address forever.

D Static allocation assigns a fixed IP address that does not change, while Dynamic allocation assigns an IP address that can change when the resource is stopped and started.

💡 Hint

Think about whether the IP address stays the same or can change over time.

Static Public IP addresses in Azure remain the same throughout the resource lifecycle, while Dynamic Public IP addresses can change when the resource is deallocated and restarted.

❓ Architecture

intermediate

Choosing Public IP SKU for High Availability

You want to assign a Public IP address to a virtual machine scale set in Azure that requires zone redundancy and protection against IP address loss during maintenance. Which Public IP SKU should you choose?

A Dynamic Basic Public IP

B Basic SKU Public IP

C Standard SKU Public IP

D Classic Public IP

💡 Hint

Consider which SKU supports zone redundancy and SLA guarantees.

The Standard SKU Public IP supports zone redundancy and higher availability SLAs, making it suitable for production workloads requiring high availability.

❓ security

advanced

Securing Access to Azure Public IP Addresses

You have a Public IP address assigned to a virtual machine in Azure. You want to restrict inbound traffic so only specific IP addresses can connect. Which Azure service should you configure?

A Azure Network Security Group (NSG) with inbound rules

B Azure Application Gateway with WAF

C Azure Traffic Manager with geographic routing

D Azure Load Balancer with NAT rules

💡 Hint

Think about controlling network traffic at the subnet or NIC level.

Network Security Groups allow you to create inbound and outbound rules to restrict traffic to specific IP addresses or ranges.

❓ Configuration

advanced

Assigning a Public IP to an Azure Load Balancer

Which of the following JSON snippets correctly defines a Standard SKU Public IP resource in an Azure Resource Manager (ARM) template with static allocation?

A

{
  "type": "Microsoft.Network/publicIPAddresses",
  "apiVersion": "2022-05-01",
  "name": "myPublicIP",
  "location": "eastus",
  "sku": { "name": "Basic" },
  "properties": {
    "publicIPAllocationMethod": "Dynamic"
  }
}

B

{
  "type": "Microsoft.Network/publicIPAddresses",
  "apiVersion": "2022-05-01",
  "name": "myPublicIP",
  "location": "eastus",
  "sku": { "name": "Standard" },
  "properties": {
    "publicIPAllocationMethod": "Static",
    "idleTimeoutInMinutes": 10
  }
}

C

{
  "type": "Microsoft.Network/publicIPAddresses",
  "apiVersion": "2022-05-01",
  "name": "myPublicIP",
  "location": "eastus",
  "sku": { "name": "Standard" },
  "properties": {
    "publicIPAllocationMethod": "Static"
  }
}

D

{
  "type": "Microsoft.Network/publicIPAddresses",
  "apiVersion": "2022-05-01",
  "name": "myPublicIP",
  "location": "eastus",
  "sku": { "name": "Standard" },
  "properties": {
    "allocationMethod": "Static"
  }
}

💡 Hint

Check the property names and SKU values carefully.

Option B correctly uses the publicIPAllocationMethod property with value Static and specifies Standard SKU. It also includes an optional idleTimeoutInMinutes property which is valid.

✅ Best Practice

expert

Designing Public IP Usage for Cost and Security Optimization

You manage multiple Azure virtual machines that require internet access but do not need inbound connections from the internet. What is the best practice regarding Public IP address assignment to optimize cost and security?

A Use a NAT gateway with a single Public IP address for outbound internet access and no Public IPs on individual VMs.

B Assign a Public IP address to each virtual machine to allow outbound internet access.

C Assign dynamic Public IP addresses to each VM to reduce cost and allow inbound access when needed.

D Use Azure Firewall with Public IPs assigned to each VM for outbound and inbound traffic control.

💡 Hint

Consider how to provide outbound internet access without exposing VMs to inbound traffic.

Using a NAT gateway with a single Public IP address allows all VMs in a subnet to access the internet outbound without assigning Public IPs to each VM, reducing cost and improving security by preventing inbound internet connections.

Practice

1.

What is the main purpose of a Public IP address in Azure?

easy

A. To allow cloud resources to connect to the internet

B. To secure internal communication within a virtual network

C. To store data securely in the cloud

D. To monitor resource usage and billing

Solution

1. Step 1: Understand Public IP role

   Public IP addresses enable resources to communicate over the internet.

2. Step 2: Compare options

   Only To allow cloud resources to connect to the internet describes internet connectivity, others describe unrelated functions.

3. Final Answer:

   To allow cloud resources to connect to the internet -> Option A

4. Quick Check:

   Public IP = Internet access [OK]

Hint: Public IP means internet access for resources [OK]

Common Mistakes:

• Confusing Public IP with internal network IP
• Thinking Public IP stores data
• Mixing Public IP with monitoring tools

2.

Which option correctly defines a Static Public IP address in Azure?

publicIpAllocationMethod: ?

easy

A. "Fixed"

B. "Dynamic"

C. "Manual"

D. "Static"

Solution

1. Step 1: Recall allocation methods

   Azure uses "Static" and "Dynamic" as valid allocation methods for Public IPs.

2. Step 2: Identify correct syntax

   "Static" is the exact string to assign for fixed IP allocation.

3. Final Answer:

   "Static" -> Option D

4. Quick Check:

   Static = fixed IP allocation [OK]

Hint: Static means fixed IP, use exact string "Static" [OK]

Common Mistakes:

• Using "Manual" or "Fixed" which are invalid values
• Confusing "Dynamic" with static allocation
• Omitting quotes around the string

3.

Given this Azure CLI command, what will be the SKU of the created Public IP?

az network public-ip create --name MyIP --resource-group MyGroup --sku Standard --allocation-method Static

medium

A. Standard

B. Basic

C. Premium

D. Dynamic

Solution

1. Step 1: Identify SKU parameter

   The command includes "--sku Standard", which sets the SKU to Standard.

2. Step 2: Understand SKU options

   Standard and Basic are common SKUs; Premium is not valid here, Dynamic is allocation method.

3. Final Answer:

   Standard -> Option A

4. Quick Check:

   --sku Standard means Standard SKU [OK]

Hint: Look for --sku value to find SKU type [OK]

Common Mistakes:

• Confusing allocation method with SKU
• Assuming default SKU is Basic without checking
• Selecting Dynamic which is not a SKU

4.

Identify the error in this Azure Resource Manager (ARM) template snippet for a Public IP:

{
  "type": "Microsoft.Network/publicIPAddresses",
  "apiVersion": "2021-02-01",
  "name": "myPublicIP",
  "properties": {
    "publicIPAllocationMethod": "Static",
    "sku": "Standard"
  }
}

medium

A. "name" must be inside "properties"

B. "sku" should be outside "properties" block

C. "publicIPAllocationMethod" value should be "Dynamic"

D. "apiVersion" is invalid

Solution

1. Step 1: Check ARM template structure

   In ARM templates, "sku" is a top-level property, not inside "properties".

2. Step 2: Validate other fields

   "publicIPAllocationMethod" can be "Static" inside properties; "name" is correctly placed; "apiVersion" is valid.

3. Final Answer:

   "sku" should be outside "properties" block -> Option B

4. Quick Check:

   SKU location in ARM = outside properties [OK]

Hint: "sku" is a sibling of "properties", not inside it [OK]

Common Mistakes:

• Placing "sku" inside properties
• Changing allocation method unnecessarily
• Misplacing "name" property

5.

You want a Public IP that never changes and offers better reliability for a production web app. Which combination should you choose?

hard

A. Dynamic allocation with Basic SKU

B. Static allocation with Basic SKU

C. Static allocation with Standard SKU

D. Dynamic allocation with Standard SKU

Solution

1. Step 1: Understand allocation methods

   Static allocation ensures the IP address does not change over time.

2. Step 2: Choose SKU for reliability

   Standard SKU provides better features and reliability than Basic SKU.

3. Step 3: Combine for production needs

   Static allocation with Standard SKU fits production web app requirements.

4. Final Answer:

   Static allocation with Standard SKU -> Option C

5. Quick Check:

   Static + Standard = fixed, reliable IP [OK]

Hint: Static + Standard SKU = fixed and reliable IP [OK]

Common Mistakes:

• Choosing Dynamic allocation for fixed IP needs
• Using Basic SKU for production reliability
• Mixing SKU and allocation method incorrectly