VNet peering for connectivity in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding VNet Peering Connectivity Scope

Which statement correctly describes the connectivity scope of Azure VNet peering?

A VNet peering requires a VPN gateway to enable communication between virtual networks in the same region.

B VNet peering allows direct connectivity between virtual networks in the same or different Azure regions without using gateways.

C VNet peering only works between virtual networks within the same subscription and region.

D VNet peering automatically routes traffic through the internet for cross-region communication.

💡 Hint

Think about how Azure connects virtual networks internally without extra devices.

Azure VNet peering connects virtual networks directly, even across regions, without needing gateways or routing traffic over the internet.

❓ Architecture

intermediate

Designing VNet Peering for Multi-Region Applications

You have two VNets in different Azure regions that must communicate with low latency and high bandwidth. Which design choice best supports this?

A Use VNet peering between the two VNets across regions.

B Set up VPN gateways in each VNet and connect them via VPN tunnels.

C Route traffic through an on-premises network to connect the VNets.

D Use public IP addresses and internet-based communication between VNets.

💡 Hint

Consider Azure's native features for private, fast network connections.

VNet peering across regions provides low latency and high bandwidth by connecting VNets directly within Azure's backbone network.

❓ security

advanced

Security Implications of VNet Peering

After peering two VNets, which security consideration is true?

A Once peered, VNets lose their individual security boundaries and cannot restrict traffic between them.

B Traffic between peered VNets is encrypted by default end-to-end without any additional setup.

C Network Security Groups (NSGs) must be configured separately on each VNet to control traffic between them.

D Peering automatically shares all NSG rules between VNets, so no extra configuration is needed.

💡 Hint

Think about how Azure controls traffic flow between networks.

NSGs apply to each VNet independently; peering does not merge or share NSG rules automatically. You must configure NSGs on each side to control traffic.

❓ service_behavior

advanced

Behavior of Transitive Routing in VNet Peering

You have three VNets: VNet1 peered with VNet2, and VNet2 peered with VNet3. Which statement about routing is true?

A VNet1 cannot communicate with VNet3 unless explicitly peered with VNet3 as well.

B VNet1 can directly communicate with VNet3 through VNet2 using transitive routing.

C Traffic between VNet1 and VNet3 is automatically routed through the internet.

D VNet peering creates a mesh network allowing all VNets to communicate without extra peering.

💡 Hint

Consider how Azure handles routing between peered VNets.

Azure VNet peering does not support transitive routing. Each VNet must be peered directly to communicate.

✅ Best Practice

expert

Best Practice for Managing VNet Peering in Large Environments

In a large Azure environment with many VNets, what is the best practice to simplify and secure VNet peering management?

A Avoid peering and rely on public IP communication between VNets.

B Peer every VNet directly with every other VNet to maximize connectivity.

C Use VPN gateways for all VNet connections to centralize security controls.

D Use hub-and-spoke architecture with a central hub VNet peered to multiple spoke VNets.

💡 Hint

Think about how to reduce complexity and improve security in network design.

Hub-and-spoke reduces the number of peerings needed and centralizes control, improving manageability and security.