Why advanced networking matters in Azure - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why use Azure Virtual Network (VNet)?

Which of the following best explains why Azure Virtual Network (VNet) is important for cloud infrastructure?

A It automatically scales virtual machines based on traffic load.

B It stores data backups in multiple regions for disaster recovery.

C It provides a global content delivery network for faster website access.

D It isolates resources in a private network, allowing secure communication between them.

💡 Hint

Think about how cloud resources communicate securely.

Azure Virtual Network creates a private network for resources, enabling secure and isolated communication.

❓ Architecture

intermediate

Choosing the right Azure Load Balancer

You want to distribute incoming traffic evenly across multiple virtual machines in Azure. Which Azure Load Balancer type should you use?

A Azure Traffic Manager

B Azure Public Load Balancer

C Azure Internal Load Balancer

D Azure Application Gateway

💡 Hint

Consider the type of traffic and where it originates.

Azure Public Load Balancer distributes incoming internet traffic across VMs. Internal Load Balancer is for internal traffic only.

❓ security

advanced

Securing Azure Virtual Network with Network Security Groups

What is the primary function of a Network Security Group (NSG) in Azure?

A To monitor network traffic for suspicious activity.

B To encrypt data stored in Azure Blob Storage.

C To control inbound and outbound traffic to resources in a virtual network.

D To automatically patch virtual machines with security updates.

💡 Hint

Think about how traffic is allowed or blocked in a network.

NSGs act like firewalls controlling which traffic can enter or leave resources in a virtual network.

❓ service_behavior

advanced

Azure ExpressRoute behavior

What is a key behavior of Azure ExpressRoute compared to typical internet connections?

A It provides a private, dedicated connection between on-premises and Azure data centers.

B It routes traffic over the public internet with encryption.

C It automatically balances traffic across multiple regions globally.

D It caches frequently accessed data to improve performance.

💡 Hint

Consider how ExpressRoute differs from normal internet connections.

ExpressRoute creates a private, dedicated connection that does not use the public internet, improving security and reliability.

✅ Best Practice

expert

Designing a secure multi-region Azure network

You need to design an Azure network that spans multiple regions with secure communication and failover. Which approach best meets this need?

A Use Azure Virtual Network peering between regions combined with VPN Gateway for encrypted traffic.

B Deploy separate VNets in each region without peering and rely on public IPs for communication.

C Connect regions using ExpressRoute only without any network peering or VPN.

D Use Azure Traffic Manager to route traffic but do not connect VNets across regions.

💡 Hint

Think about secure, private communication and failover across regions.

Virtual Network peering allows private communication between VNets. VPN Gateway adds encryption for cross-region traffic, ensuring security and failover.