ExpressRoute for dedicated connections in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding ExpressRoute Circuit Bandwidth

You have an ExpressRoute circuit with a bandwidth of 1 Gbps. What happens if your on-premises network tries to send 2 Gbps of data through this circuit?

A The circuit will automatically increase bandwidth to 2 Gbps to handle the traffic.

B Azure will queue the extra traffic and deliver it later without any loss.

C The circuit will split the traffic and send half through ExpressRoute and half through the public internet.

D Traffic above 1 Gbps will be dropped or delayed because the circuit bandwidth is limited to 1 Gbps.

💡 Hint

Think about the fixed capacity of a dedicated connection.

ExpressRoute circuits have fixed bandwidth limits. Traffic exceeding this limit can be dropped or delayed because the circuit cannot carry more than its provisioned bandwidth.

❓ Architecture

intermediate

Choosing the Right ExpressRoute Peering Type

You want to connect your on-premises network to Azure services like Azure Storage and Azure SQL Database using ExpressRoute. Which peering type should you configure?

A Private peering only

B Microsoft peering only

C Public peering only

D Both private and Microsoft peering

💡 Hint

Consider which peering type connects to Azure public services.

Microsoft peering is used to connect to Azure public services like Azure Storage and Azure SQL Database over ExpressRoute.

❓ security

advanced

Securing Data on ExpressRoute Connections

Which of the following is the best practice to ensure data confidentiality when using ExpressRoute for dedicated connections?

A Encrypt data at the application layer before sending it over ExpressRoute.

B Use ExpressRoute with public peering to benefit from Azure's built-in encryption.

C Use IPsec VPN tunnels over ExpressRoute to encrypt data in transit.

D Rely solely on the private nature of ExpressRoute circuits without additional encryption.

💡 Hint

Think about layers of security beyond the network.

ExpressRoute provides a private connection but does not encrypt data by default. Encrypting data at the application layer ensures confidentiality even if the network is compromised.

❓ service_behavior

advanced

ExpressRoute Circuit Status Behavior

You have created an ExpressRoute circuit but it shows a status of 'Provisioning' for several hours. What is the most likely reason?

A The circuit requires approval and provisioning by the connectivity provider before it becomes active.

B The circuit is active and ready to use immediately after creation.

C The circuit is in error state and needs to be deleted and recreated.

D The circuit is waiting for you to configure BGP sessions before it becomes active.

💡 Hint

Think about the role of the connectivity provider in ExpressRoute setup.

After creating an ExpressRoute circuit, the connectivity provider must provision and activate the circuit before it becomes usable.

✅ Best Practice

expert

Designing High Availability with ExpressRoute

You want to design a highly available network connection between your on-premises data center and Azure using ExpressRoute. Which design approach follows best practices?

A Use a single ExpressRoute circuit with one peering to reduce complexity.

B Use ExpressRoute with public peering only and rely on Azure redundancy.

C Use two ExpressRoute circuits from different providers or locations with BGP failover configured.

D Use VPN over the internet as a backup to a single ExpressRoute circuit without BGP.

💡 Hint

Consider redundancy and failover in network design.

High availability requires multiple ExpressRoute circuits from different providers or locations with BGP failover to ensure continuous connectivity.

Practice

1. What is the main benefit of using Azure ExpressRoute for connecting to Azure services?

easy

A. It enables running virtual machines without any network configuration.

B. It allows free internet access from any location worldwide.

C. It provides a private, dedicated connection that is more secure and reliable than the public internet.

D. It automatically backs up all data to Azure Blob Storage.

Solution

1. Step 1: Understand ExpressRoute purpose

   ExpressRoute creates private connections to Azure, avoiding the public internet.

2. Step 2: Identify benefits of private connection

   Private connections improve security, speed, and reliability compared to public internet.

3. Final Answer:

   It provides a private, dedicated connection that is more secure and reliable than the public internet. -> Option C

4. Quick Check:

   ExpressRoute = private, secure connection [OK]

Hint: ExpressRoute means private, not public, connection [OK]

Common Mistakes:

• Confusing ExpressRoute with VPN or public internet
• Thinking it provides free internet access
• Assuming it automatically backs up data

2. Which of the following is the correct step to create an ExpressRoute circuit in Azure Portal?

easy

A. Go to 'Create a resource' > Networking > ExpressRoute, then fill in provider, location, and bandwidth details.

B. Go to 'Create a resource' > Compute > Virtual Machine, then select ExpressRoute option.

C. Go to 'Create a resource' > Storage > Blob Storage, then enable ExpressRoute.

D. Go to 'Create a resource' > Database > SQL Server, then configure ExpressRoute.

Solution

1. Step 1: Identify correct Azure Portal path

   ExpressRoute circuits are created under Networking resources.

2. Step 2: Confirm required details

   Provider, location, and bandwidth are needed to create the circuit.

3. Final Answer:

   Go to 'Create a resource' > Networking > ExpressRoute, then fill in provider, location, and bandwidth details. -> Option A

4. Quick Check:

   ExpressRoute circuit creation = Networking resource [OK]

Hint: ExpressRoute circuits are under Networking, not Compute or Storage [OK]

Common Mistakes:

• Selecting Compute or Storage instead of Networking
• Skipping provider or bandwidth details
• Confusing ExpressRoute with VM or database setup

3. Given this Azure CLI command snippet to create an ExpressRoute circuit:

az network express-route create --name MyCircuit --resource-group MyGroup --location eastus --bandwidth 200 --provider "Contoso" --peering-location "Silicon Valley" --sku-tier Premium --sku-family Metered

What will be the bandwidth of the created ExpressRoute circuit?

medium

A. 200 Mbps

B. 100 Mbps

C. 500 Mbps

D. 1 Gbps

Solution

1. Step 1: Locate bandwidth parameter in command

   The command includes '--bandwidth 200', which sets bandwidth to 200 Mbps.

2. Step 2: Confirm bandwidth unit

   Azure ExpressRoute bandwidth is specified in Mbps, so 200 means 200 Mbps.

3. Final Answer:

   200 Mbps -> Option A

4. Quick Check:

   Bandwidth parameter = 200 Mbps [OK]

Hint: Look for --bandwidth value in CLI command [OK]

Common Mistakes:

• Confusing bandwidth units (Mbps vs Gbps)
• Ignoring the --bandwidth parameter
• Assuming default bandwidth if not specified

4. You tried to create an ExpressRoute circuit but received an error: "Invalid peering location." What is the most likely cause?

medium

A. The resource group name contains invalid characters.

B. The bandwidth value is too high for the selected tier.

C. The Azure subscription has expired.

D. The peering location specified is not supported by the chosen provider.

Solution

1. Step 1: Understand error message meaning

   "Invalid peering location" means the location is not valid for the provider.

2. Step 2: Check provider and location compatibility

   Each provider supports specific peering locations; mismatch causes this error.

3. Final Answer:

   The peering location specified is not supported by the chosen provider. -> Option D

4. Quick Check:

   Invalid peering location = unsupported location by provider [OK]

Hint: Match peering location exactly with provider's supported list [OK]

Common Mistakes:

• Blaming bandwidth or resource group name
• Ignoring provider-location compatibility
• Assuming subscription status causes this error

5. A company needs a dedicated connection to Azure with high bandwidth and global reach. They want to use ExpressRoute with premium features. Which combination of settings should they choose to meet these requirements?

hard

A. SKU tier: Standard, Bandwidth: 500 Mbps, Peering location: Global

B. SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Global

C. SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Regional

D. SKU tier: Standard, Bandwidth: 200 Mbps, Peering location: Regional

Solution

1. Step 1: Identify premium features for global reach

   Premium SKU tier enables global connectivity beyond regional limits.

2. Step 2: Choose high bandwidth and global peering

   1 Gbps bandwidth meets high speed; global peering location supports worldwide access.

3. Final Answer:

   SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Global -> Option B

4. Quick Check:

   Premium + 1 Gbps + Global = high bandwidth and global reach [OK]

Hint: Premium tier + global peering = worldwide high-speed connection [OK]

Common Mistakes:

• Choosing Standard tier for global reach
• Selecting regional peering for global needs
• Underestimating required bandwidth