VNet-to-VNet connectivity in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is VNet-to-VNet connectivity in Azure?

VNet-to-VNet connectivity allows two Azure Virtual Networks to connect and communicate securely as if they were on the same network, enabling resources in different VNets to interact.

beginner

Name two common methods to establish VNet-to-VNet connectivity in Azure.

The two common methods are: 1) Using VPN Gateway connections, and 2) Using Azure Virtual Network Peering.

intermediate

What is a key difference between VPN Gateway connection and VNet Peering?

VPN Gateway connections use encrypted tunnels over the internet and can connect VNets across regions or subscriptions, while VNet Peering connects VNets directly within Azure's backbone network with low latency and no encryption overhead.

intermediate

Why might you choose VNet Peering over VPN Gateway for VNet-to-VNet connectivity?

VNet Peering offers faster, lower latency connections with no bandwidth charges and simpler setup when VNets are in the same region or supported cross-region, making it ideal for high-performance needs.

advanced

What is a limitation to keep in mind when using VNet Peering?

VNet Peering requires that the VNets have non-overlapping IP address spaces, and some features like transitive peering (routing through a peered VNet to another VNet) are not supported.

Which Azure service is used to create encrypted tunnels for VNet-to-VNet connectivity?

A Azure Firewall

B VPN Gateway

C Azure Load Balancer

D Azure DNS

VPN Gateway creates encrypted tunnels over the internet to connect VNets securely.

What must be true about IP address ranges when using VNet Peering?

A They must not overlap

B They must be identical

C They must overlap

D They must be public IP ranges

VNet Peering requires non-overlapping IP address spaces to avoid routing conflicts.

Which VNet-to-VNet connectivity option offers lower latency and no bandwidth charges?

A VNet Peering

B VPN Gateway connection

C ExpressRoute

D Azure Bastion

VNet Peering connects VNets directly over Azure's backbone network with low latency and no bandwidth charges.

Can VNet Peering connect VNets across different Azure subscriptions?

A No, only within the same subscription

B Only if they use the same IP range

C Only if they are in the same resource group

D Yes, it supports cross-subscription peering

VNet Peering supports connections across different subscriptions as long as IP ranges do not overlap.

Which method would you use to connect VNets in different Azure regions securely over the internet?

A Azure Load Balancer

B VNet Peering

C VPN Gateway connection

D Azure Traffic Manager

VPN Gateway connections use encrypted tunnels over the internet and support cross-region VNet connectivity.

Explain how VNet-to-VNet connectivity works in Azure and describe the main options available.

Think about how two separate networks can talk to each other securely.

What are the key considerations and limitations when setting up VNet Peering?

Focus on what you must check before peering and what peering cannot do.