Why advanced networking matters in Azure - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to create a virtual network in Azure.

Azure

az network vnet create --name [1] --resource-group MyResourceGroup --location eastus --address-prefix 10.0.0.0/16

Drag options to blanks, or click blank then click option'

AMyVM

BMyStorage

CMyVNet

DMyApp

Attempts:

3 left

💡 Hint

Common Mistakes

Using a name that refers to storage or virtual machines instead of a network.

The --name parameter specifies the name of the virtual network. Here, MyVNet is the correct name for a virtual network.

2fill in blank

medium

Complete the code to add a subnet to an existing virtual network.

Azure

az network vnet subnet create --address-prefix 10.0.1.0/24 --name [1] --vnet-name MyVNet --resource-group MyResourceGroup

Drag options to blanks, or click blank then click option'

AMySubnet

BMyStorage

CMyVM

DMyApp

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing subnet names with virtual machine or storage names.

The --name parameter specifies the subnet name. MySubnet is the correct choice for a subnet.

3fill in blank

hard

Fix the error in the command to create a network security group.

Azure

az network nsg create --resource-group MyResourceGroup --name [1] --location eastus

Drag options to blanks, or click blank then click option'

AMyNSG

BMyVNet

CMySubnet

DMyVM

Attempts:

3 left

💡 Hint

Common Mistakes

Using a virtual network or virtual machine name instead of a network security group name.

The --name parameter should be the name of the network security group. MyNSG is the correct name for a network security group.

4fill in blank

hard

Fill both blanks to create a rule allowing HTTP traffic in a network security group.

Azure

az network nsg rule create --resource-group MyResourceGroup --nsg-name MyNSG --name AllowHTTP --protocol [1] --direction [2] --priority 100 --source-address-prefix '*' --source-port-range '*' --destination-address-prefix '*' --destination-port-range 80 --access Allow

Drag options to blanks, or click blank then click option'

ATcp

BInbound

COutbound

DUdp

Attempts:

3 left

💡 Hint

Common Mistakes

Using UDP protocol instead of TCP for HTTP.

Setting direction to outbound instead of inbound.

The --protocol should be Tcp for HTTP traffic. The --direction should be Inbound to allow incoming traffic.

5fill in blank

hard

Fill all three blanks to create a public IP address and associate it with a network interface.

Azure

az network public-ip create --resource-group MyResourceGroup --name [1] --allocation-method [2] --sku Basic
az network nic ip-config update --resource-group MyResourceGroup --nic-name MyNic --name ipconfig1 --public-ip-address [3]

Drag options to blanks, or click blank then click option'

AMyPublicIP

BStatic

DDynamic

Attempts:

3 left

💡 Hint

Common Mistakes

Using different names for the public IP in creation and association.

Choosing static allocation when dynamic is intended.

The public IP address is named MyPublicIP. The allocation method is Dynamic to assign IP automatically. The network interface associates with the same public IP name MyPublicIP.

Practice

1. Why is advanced networking important in Azure cloud environments?

easy

A. It helps secure resources and control access

B. It increases the cost of cloud services

C. It reduces the number of virtual machines needed

D. It automatically fixes software bugs

Solution

1. Step 1: Understand the role of networking in cloud security

   Advanced networking allows setting rules and boundaries to protect cloud resources from unauthorized access.

2. Step 2: Recognize the benefits of controlling access

   By controlling who can connect to services, it keeps data safe and ensures only trusted users can use resources.

3. Final Answer:

   It helps secure resources and control access -> Option A

4. Quick Check:

   Networking = Security and access control [OK]

Hint: Think security and access control first for networking [OK]

Common Mistakes:

• Confusing networking with cost management
• Assuming networking fixes software bugs
• Thinking networking reduces virtual machines

2. Which Azure service is used to create isolated networks for your cloud resources?

easy

A. Azure Functions

B. Azure Blob Storage

C. Azure Virtual Network

D. Azure Cosmos DB

Solution

1. Step 1: Identify the service for network isolation

   Azure Virtual Network (VNet) allows you to create private, isolated networks in the cloud.

2. Step 2: Differentiate from other services

   Blob Storage stores files, Functions run code, Cosmos DB is a database; none create networks.

3. Final Answer:

   Azure Virtual Network -> Option C

4. Quick Check:

   Isolated network = Virtual Network [OK]

Hint: Virtual Network means isolated cloud network [OK]

Common Mistakes:

• Confusing storage or compute services with networking
• Choosing database services for network tasks
• Mixing up Azure service purposes

3. Given this Azure CLI command, what does it do?

az network vnet create --name MyVnet --resource-group MyGroup --address-prefix 10.0.0.0/16

medium

A. Creates a virtual network named MyVnet with address space 10.0.0.0/16

B. Deletes the virtual network named MyVnet

C. Creates a storage account named MyVnet

D. Creates a virtual machine in MyGroup

Solution

1. Step 1: Analyze the command components

   The command uses 'az network vnet create' which creates a virtual network. The name is MyVnet, resource group is MyGroup, and address prefix is 10.0.0.0/16.

2. Step 2: Understand the effect of the command

   This command sets up a new virtual network with the specified IP range inside the given resource group.

3. Final Answer:

   Creates a virtual network named MyVnet with address space 10.0.0.0/16 -> Option A

4. Quick Check:

   az network vnet create = create VNet [OK]

Hint: Look for 'create' and 'vnet' keywords in command [OK]

Common Mistakes:

• Thinking it deletes resources
• Confusing virtual network with storage or VM
• Ignoring address prefix meaning

4. You tried to create a subnet in Azure but got an error saying the address range overlaps. What should you do?

medium

A. Ignore the error and proceed

B. Delete the virtual network and try again

C. Use the same address range as another subnet

D. Choose a subnet address range that does not overlap with existing subnets

Solution

1. Step 1: Understand subnet address ranges

   Each subnet must have a unique IP address range that does not overlap with others in the same virtual network.

2. Step 2: Fix the overlap error

   To fix the error, select a different subnet range that fits inside the virtual network but does not overlap existing subnets.

3. Final Answer:

   Choose a subnet address range that does not overlap with existing subnets -> Option D

4. Quick Check:

   Subnet ranges must be unique [OK]

Hint: Subnet ranges cannot overlap in same VNet [OK]

Common Mistakes:

• Trying to reuse overlapping ranges
• Deleting entire network unnecessarily
• Ignoring error and continuing

5. You want to improve your app's speed and security by isolating traffic between services in Azure. Which advanced networking feature should you use?

hard

A. Azure Blob Storage

B. Azure Virtual Network Peering

C. Azure Traffic Manager

D. Azure Content Delivery Network (CDN)

Solution

1. Step 1: Identify the need for isolated, fast communication

   Virtual Network Peering connects two virtual networks privately, allowing fast and secure traffic between services.

2. Step 2: Differentiate from other options

   Blob Storage stores data, Traffic Manager routes traffic globally, CDN caches content; none isolate traffic between services securely.

3. Final Answer:

   Azure Virtual Network Peering -> Option B

4. Quick Check:

   Peering = fast, secure network link [OK]

Hint: Peering links VNets privately for speed and security [OK]

Common Mistakes:

• Confusing storage or CDN with network isolation
• Choosing Traffic Manager for internal traffic isolation
• Ignoring peering benefits