ExpressRoute for dedicated connections in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Azure ExpressRoute?

Azure ExpressRoute is a service that creates a private, dedicated connection between your on-premises network and Microsoft Azure data centers, bypassing the public internet for better security and reliability.

beginner

Why use a dedicated connection like ExpressRoute instead of a VPN over the internet?

Dedicated connections provide more consistent network performance, lower latency, and higher security because they do not travel over the public internet, unlike VPNs which can be affected by internet traffic and interruptions.

intermediate

What are the main components involved in setting up an ExpressRoute connection?

The main components are: the on-premises network, the ExpressRoute circuit (the dedicated link), the connectivity provider (like a telecom company), and the Azure virtual network gateway.

beginner

What is an ExpressRoute circuit?

An ExpressRoute circuit is the private connection between your on-premises infrastructure and Azure. It is a logical connection that uses physical connections provided by a connectivity provider.

intermediate

How does ExpressRoute improve security compared to internet-based connections?

ExpressRoute connections do not traverse the public internet, reducing exposure to internet-based threats and providing a private path between your network and Azure.

What does Azure ExpressRoute provide?

A A web hosting platform

B A public internet VPN connection

C A cloud storage service

D A private, dedicated connection to Azure

Azure ExpressRoute provides a private, dedicated connection between your on-premises network and Azure.

Which of the following is NOT a benefit of ExpressRoute?

A Uses public internet for connectivity

B Consistent network performance

C Lower latency

D Improved security

ExpressRoute does NOT use the public internet; it uses private dedicated connections.

Who typically provides the physical connection for ExpressRoute?

A Microsoft only

B Internet service providers only

C Connectivity providers like telecom companies

D End users

Connectivity providers such as telecom companies provide the physical connection for ExpressRoute.

What is an ExpressRoute circuit?

A A virtual machine in Azure

B A logical private connection between on-premises and Azure

C A public IP address

D A storage account

An ExpressRoute circuit is a logical private connection between your on-premises network and Azure.

ExpressRoute connections improve security by:

A Using a private connection that does not traverse the public internet

B Encrypting data over the public internet

C Using a firewall on Azure

D Blocking all external traffic

ExpressRoute uses private connections that do not go over the public internet, enhancing security.

Explain what Azure ExpressRoute is and why it is used.

Think about how businesses connect their own networks to cloud safely and reliably.

Describe the main components involved in setting up an ExpressRoute connection.

Consider the physical and logical parts needed to link your network to Azure.

Practice

1. What is the main benefit of using Azure ExpressRoute for connecting to Azure services?

easy

A. It enables running virtual machines without any network configuration.

B. It allows free internet access from any location worldwide.

C. It provides a private, dedicated connection that is more secure and reliable than the public internet.

D. It automatically backs up all data to Azure Blob Storage.

Solution

1. Step 1: Understand ExpressRoute purpose

   ExpressRoute creates private connections to Azure, avoiding the public internet.

2. Step 2: Identify benefits of private connection

   Private connections improve security, speed, and reliability compared to public internet.

3. Final Answer:

   It provides a private, dedicated connection that is more secure and reliable than the public internet. -> Option C

4. Quick Check:

   ExpressRoute = private, secure connection [OK]

Hint: ExpressRoute means private, not public, connection [OK]

Common Mistakes:

• Confusing ExpressRoute with VPN or public internet
• Thinking it provides free internet access
• Assuming it automatically backs up data

2. Which of the following is the correct step to create an ExpressRoute circuit in Azure Portal?

easy

A. Go to 'Create a resource' > Networking > ExpressRoute, then fill in provider, location, and bandwidth details.

B. Go to 'Create a resource' > Compute > Virtual Machine, then select ExpressRoute option.

C. Go to 'Create a resource' > Storage > Blob Storage, then enable ExpressRoute.

D. Go to 'Create a resource' > Database > SQL Server, then configure ExpressRoute.

Solution

1. Step 1: Identify correct Azure Portal path

   ExpressRoute circuits are created under Networking resources.

2. Step 2: Confirm required details

   Provider, location, and bandwidth are needed to create the circuit.

3. Final Answer:

   Go to 'Create a resource' > Networking > ExpressRoute, then fill in provider, location, and bandwidth details. -> Option A

4. Quick Check:

   ExpressRoute circuit creation = Networking resource [OK]

Hint: ExpressRoute circuits are under Networking, not Compute or Storage [OK]

Common Mistakes:

• Selecting Compute or Storage instead of Networking
• Skipping provider or bandwidth details
• Confusing ExpressRoute with VM or database setup

3. Given this Azure CLI command snippet to create an ExpressRoute circuit:

az network express-route create --name MyCircuit --resource-group MyGroup --location eastus --bandwidth 200 --provider "Contoso" --peering-location "Silicon Valley" --sku-tier Premium --sku-family Metered

What will be the bandwidth of the created ExpressRoute circuit?

medium

A. 200 Mbps

B. 100 Mbps

C. 500 Mbps

D. 1 Gbps

Solution

1. Step 1: Locate bandwidth parameter in command

   The command includes '--bandwidth 200', which sets bandwidth to 200 Mbps.

2. Step 2: Confirm bandwidth unit

   Azure ExpressRoute bandwidth is specified in Mbps, so 200 means 200 Mbps.

3. Final Answer:

   200 Mbps -> Option A

4. Quick Check:

   Bandwidth parameter = 200 Mbps [OK]

Hint: Look for --bandwidth value in CLI command [OK]

Common Mistakes:

• Confusing bandwidth units (Mbps vs Gbps)
• Ignoring the --bandwidth parameter
• Assuming default bandwidth if not specified

4. You tried to create an ExpressRoute circuit but received an error: "Invalid peering location." What is the most likely cause?

medium

A. The resource group name contains invalid characters.

B. The bandwidth value is too high for the selected tier.

C. The Azure subscription has expired.

D. The peering location specified is not supported by the chosen provider.

Solution

1. Step 1: Understand error message meaning

   "Invalid peering location" means the location is not valid for the provider.

2. Step 2: Check provider and location compatibility

   Each provider supports specific peering locations; mismatch causes this error.

3. Final Answer:

   The peering location specified is not supported by the chosen provider. -> Option D

4. Quick Check:

   Invalid peering location = unsupported location by provider [OK]

Hint: Match peering location exactly with provider's supported list [OK]

Common Mistakes:

• Blaming bandwidth or resource group name
• Ignoring provider-location compatibility
• Assuming subscription status causes this error

5. A company needs a dedicated connection to Azure with high bandwidth and global reach. They want to use ExpressRoute with premium features. Which combination of settings should they choose to meet these requirements?

hard

A. SKU tier: Standard, Bandwidth: 500 Mbps, Peering location: Global

B. SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Global

C. SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Regional

D. SKU tier: Standard, Bandwidth: 200 Mbps, Peering location: Regional

Solution

1. Step 1: Identify premium features for global reach

   Premium SKU tier enables global connectivity beyond regional limits.

2. Step 2: Choose high bandwidth and global peering

   1 Gbps bandwidth meets high speed; global peering location supports worldwide access.

3. Final Answer:

   SKU tier: Premium, Bandwidth: 1 Gbps, Peering location: Global -> Option B

4. Quick Check:

   Premium + 1 Gbps + Global = high bandwidth and global reach [OK]

Hint: Premium tier + global peering = worldwide high-speed connection [OK]

Common Mistakes:

• Choosing Standard tier for global reach
• Selecting regional peering for global needs
• Underestimating required bandwidth