Microsoft AZ-104 Azure Virtual Networking Practice Test

 

Topic 14 focuses on Virtual Networks, Subnets, Peering, Public IPs, UDRs, and Connectivity for the Microsoft Certified: Azure Administrator Associate certification and the AZ-104 exam, using Microsoft Azure administration scenarios. For broader exam preparation, review the Microsoft Azure Administrator AZ-104 Exam Dumps page. Each question includes a concise explanation of the correct answer and the technical reason the other choices are incorrect.

Question 1

To provide private IP connectivity for Azure resources, which Azure configuration should be selected?

1. Virtual network peering
2. Virtual appliance next hop
3. User-defined route (UDR)
4. Virtual network (VNet)

Correct Answer: D

 

Correct Answer

Answer D is correct because Virtual network (VNet) is an isolated Azure network boundary with one or more IP address spaces and subnets. It directly supports the requirement to provide private IP connectivity for Azure resources.

Incorrect Answers

Answer A is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

Answer B is incorrect because Virtual appliance next hop is used to steer subnet traffic through a firewall or other routing appliance; it does not provide the capability described in the scenario.

Answer C is incorrect because User-defined route (UDR) is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it does not provide the capability described in the scenario.

 

Question 2

For Virtual network (VNet), which administrative outcome is expected?

1. Provide private IP connectivity for Azure resources
2. Enable deterministic routing between virtual networks or connected environments
3. Determine which Azure route is used when multiple routes match a destination
4. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing

Correct Answer: A

 

Correct Answer

Answer A is correct because Virtual network (VNet) is an isolated Azure network boundary with one or more IP address spaces and subnets. Its intended administrative use is to provide private IP connectivity for Azure resources.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Non-overlapping address spaces, which is used to enable deterministic routing between virtual networks or connected environments; it is not the primary purpose of Virtual network (VNet).

Answer C is incorrect because that outcome belongs to Longest-prefix match, which is used to determine which Azure route is used when multiple routes match a destination; it is not the primary purpose of Virtual network (VNet).

Answer D is incorrect because that outcome belongs to Virtual network peering, which is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it is not the primary purpose of Virtual network (VNet).

 

Question 3

To segment a virtual network into smaller address ranges for routing and security administration, which Azure configuration should be selected?

1. Non-overlapping address spaces
2. User-defined route (UDR)
3. Network interface IP configuration
4. Subnet

Correct Answer: D

 

Correct Answer

Answer D is correct because Subnet is a range carved from a VNet address space and used to place or integrate resources. It directly supports the requirement to segment a virtual network into smaller address ranges for routing and security administration.

Incorrect Answers

Answer A is incorrect because Non-overlapping address spaces is used to enable deterministic routing between virtual networks or connected environments; it does not provide the capability described in the scenario.

Answer B is incorrect because User-defined route (UDR) is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it does not provide the capability described in the scenario.

Answer C is incorrect because Network interface IP configuration is used to control the addresses used by a virtual machine network interface; it does not provide the capability described in the scenario.

 

Question 4

For Subnet, which administrative outcome is expected?

1. Force a custom path when prefix length is the same
2. Give an Azure resource a public endpoint using the supported Standard public IP model
3. Determine which Azure route is used when multiple routes match a destination
4. Segment a virtual network into smaller address ranges for routing and security administration

Correct Answer: D

 

Correct Answer

Answer D is correct because Subnet is a range carved from a VNet address space and used to place or integrate resources. Its intended administrative use is to segment a virtual network into smaller address ranges for routing and security administration.

Incorrect Answers

Answer A is incorrect because that outcome belongs to UDR route preference, which is used to force a custom path when prefix length is the same; it is not the primary purpose of Subnet.

Answer B is incorrect because that outcome belongs to Standard public IP address, which is used to give an Azure resource a public endpoint using the supported Standard public IP model; it is not the primary purpose of Subnet.

Answer C is incorrect because that outcome belongs to Longest-prefix match, which is used to determine which Azure route is used when multiple routes match a destination; it is not the primary purpose of Subnet.

 

Question 5

To enable deterministic routing between virtual networks or connected environments, which Azure configuration should be selected?

1. Standard public IP address
2. Non-overlapping address spaces
3. Gateway transit
4. Route table

Correct Answer: B

 

Correct Answer

Answer B is correct because Non-overlapping address spaces is the addressing requirement that connected or peered networks must avoid conflicting IP ranges for reliable routing. It directly supports the requirement to enable deterministic routing between virtual networks or connected environments.

Incorrect Answers

Answer A is incorrect because Standard public IP address is used to give an Azure resource a public endpoint using the supported Standard public IP model; it does not provide the capability described in the scenario.

Answer C is incorrect because Gateway transit is used to share a connectivity gateway with a peered virtual network where supported; it does not provide the capability described in the scenario.

Answer D is incorrect because Route table is used to apply custom routing decisions to traffic leaving selected subnets; it does not provide the capability described in the scenario.

 

Question 6

For Non-overlapping address spaces, which administrative outcome is expected?

1. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing
2. Enable deterministic routing between virtual networks or connected environments
3. Send traffic through a chosen next hop such as a virtual appliance or gateway
4. Segment a virtual network into smaller address ranges for routing and security administration

Correct Answer: B

 

Correct Answer

Answer B is correct because Non-overlapping address spaces is the addressing requirement that connected or peered networks must avoid conflicting IP ranges for reliable routing. Its intended administrative use is to enable deterministic routing between virtual networks or connected environments.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Virtual network peering, which is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it is not the primary purpose of Non-overlapping address spaces.

Answer C is incorrect because that outcome belongs to User-defined route (UDR), which is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it is not the primary purpose of Non-overlapping address spaces.

Answer D is incorrect because that outcome belongs to Subnet, which is used to segment a virtual network into smaller address ranges for routing and security administration; it is not the primary purpose of Non-overlapping address spaces.

 

Question 7

To allow resources in separate VNets to communicate using private IP addresses with low-latency routing, which Azure configuration should be selected?

1. Effective routes
2. Route table
3. Virtual network peering
4. Virtual network (VNet)

Correct Answer: C

 

Correct Answer

Answer C is correct because Virtual network peering is a private Azure backbone connection between two virtual networks. It directly supports the requirement to allow resources in separate VNets to communicate using private IP addresses with low-latency routing.

Incorrect Answers

Answer A is incorrect because Effective routes is used to troubleshoot the actual routes Azure will consider for a VM network interface; it does not provide the capability described in the scenario.

Answer B is incorrect because Route table is used to apply custom routing decisions to traffic leaving selected subnets; it does not provide the capability described in the scenario.

Answer D is incorrect because Virtual network (VNet) is used to provide private IP connectivity for Azure resources; it does not provide the capability described in the scenario.

 

Question 8

For Virtual network peering, which administrative outcome is expected?

1. Avoid assuming that peering creates automatic transitive routing across multiple VNets
2. Apply custom routing decisions to traffic leaving selected subnets
3. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing
4. Force a custom path when prefix length is the same

Correct Answer: C

 

Correct Answer

Answer C is correct because Virtual network peering is a private Azure backbone connection between two virtual networks. Its intended administrative use is to allow resources in separate VNets to communicate using private IP addresses with low-latency routing.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Non-transitive peering, which is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it is not the primary purpose of Virtual network peering.

Answer B is incorrect because that outcome belongs to Route table, which is used to apply custom routing decisions to traffic leaving selected subnets; it is not the primary purpose of Virtual network peering.

Answer D is incorrect because that outcome belongs to UDR route preference, which is used to force a custom path when prefix length is the same; it is not the primary purpose of Virtual network peering.

 

Question 9

To avoid assuming that peering creates automatic transitive routing across multiple VNets, which Azure configuration should be selected?

1. Non-transitive peering
2. Longest-prefix match
3. Standard public IP address
4. Virtual network peering

Correct Answer: A

 

Correct Answer

Answer A is correct because Non-transitive peering is the default behavior in which VNet A peered to B and B peered to C does not automatically make A and C connected through B. It directly supports the requirement to avoid assuming that peering creates automatic transitive routing across multiple VNets.

Incorrect Answers

Answer B is incorrect because Longest-prefix match is used to determine which Azure route is used when multiple routes match a destination; it does not provide the capability described in the scenario.

Answer C is incorrect because Standard public IP address is used to give an Azure resource a public endpoint using the supported Standard public IP model; it does not provide the capability described in the scenario.

Answer D is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

 

Question 10

For Non-transitive peering, which administrative outcome is expected?

1. Force a custom path when prefix length is the same
2. Avoid assuming that peering creates automatic transitive routing across multiple VNets
3. Determine which Azure route is used when multiple routes match a destination
4. Enable deterministic routing between virtual networks or connected environments

Correct Answer: B

 

Correct Answer

Answer B is correct because Non-transitive peering is the default behavior in which VNet A peered to B and B peered to C does not automatically make A and C connected through B. Its intended administrative use is to avoid assuming that peering creates automatic transitive routing across multiple VNets.

Incorrect Answers

Answer A is incorrect because that outcome belongs to UDR route preference, which is used to force a custom path when prefix length is the same; it is not the primary purpose of Non-transitive peering.

Answer C is incorrect because that outcome belongs to Longest-prefix match, which is used to determine which Azure route is used when multiple routes match a destination; it is not the primary purpose of Non-transitive peering.

Answer D is incorrect because that outcome belongs to Non-overlapping address spaces, which is used to enable deterministic routing between virtual networks or connected environments; it is not the primary purpose of Non-transitive peering.

 

Question 11

To share a connectivity gateway with a peered virtual network where supported, which Azure configuration should be selected?

1. Network interface IP configuration
2. Effective routes
3. Gateway transit
4. Standard public IP address

Correct Answer: C

 

Correct Answer

Answer C is correct because Gateway transit is a peering option that allows one VNet to advertise the use of its VPN or ExpressRoute gateway to a peered VNet. It directly supports the requirement to share a connectivity gateway with a peered virtual network where supported.

Incorrect Answers

Answer A is incorrect because Network interface IP configuration is used to control the addresses used by a virtual machine network interface; it does not provide the capability described in the scenario.

Answer B is incorrect because Effective routes is used to troubleshoot the actual routes Azure will consider for a VM network interface; it does not provide the capability described in the scenario.

Answer D is incorrect because Standard public IP address is used to give an Azure resource a public endpoint using the supported Standard public IP model; it does not provide the capability described in the scenario.

 

Question 12

For Gateway transit, which administrative outcome is expected?

1. Identify which Azure networking control is preventing expected communication
2. Determine which Azure route is used when multiple routes match a destination
3. Share a connectivity gateway with a peered virtual network where supported
4. Steer subnet traffic through a firewall or other routing appliance

Correct Answer: C

 

Correct Answer

Answer C is correct because Gateway transit is a peering option that allows one VNet to advertise the use of its VPN or ExpressRoute gateway to a peered VNet. Its intended administrative use is to share a connectivity gateway with a peered virtual network where supported.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Connectivity troubleshooting, which is used to identify which Azure networking control is preventing expected communication; it is not the primary purpose of Gateway transit.

Answer B is incorrect because that outcome belongs to Longest-prefix match, which is used to determine which Azure route is used when multiple routes match a destination; it is not the primary purpose of Gateway transit.

Answer D is incorrect because that outcome belongs to Virtual appliance next hop, which is used to steer subnet traffic through a firewall or other routing appliance; it is not the primary purpose of Gateway transit.

 

Question 13

To give an Azure resource a public endpoint using the supported Standard public IP model, which Azure configuration should be selected?

1. Standard public IP address
2. Virtual appliance next hop
3. Virtual network peering
4. Effective routes

Correct Answer: A

 

Correct Answer

Answer A is correct because Standard public IP address is the current Azure public IP SKU used to provide a stable internet-routable frontend address to supported resources. It directly supports the requirement to give an Azure resource a public endpoint using the supported Standard public IP model.

Incorrect Answers

Answer B is incorrect because Virtual appliance next hop is used to steer subnet traffic through a firewall or other routing appliance; it does not provide the capability described in the scenario.

Answer C is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

Answer D is incorrect because Effective routes is used to troubleshoot the actual routes Azure will consider for a VM network interface; it does not provide the capability described in the scenario.

 

Question 14

For Standard public IP address, which administrative outcome is expected?

1. Segment a virtual network into smaller address ranges for routing and security administration
2. Troubleshoot the actual routes Azure will consider for a VM network interface
3. Provide private IP connectivity for Azure resources
4. Give an Azure resource a public endpoint using the supported Standard public IP model

Correct Answer: D

 

Correct Answer

Answer D is correct because Standard public IP address is the current Azure public IP SKU used to provide a stable internet-routable frontend address to supported resources. Its intended administrative use is to give an Azure resource a public endpoint using the supported Standard public IP model.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Subnet, which is used to segment a virtual network into smaller address ranges for routing and security administration; it is not the primary purpose of Standard public IP address.

Answer B is incorrect because that outcome belongs to Effective routes, which is used to troubleshoot the actual routes Azure will consider for a VM network interface; it is not the primary purpose of Standard public IP address.

Answer C is incorrect because that outcome belongs to Virtual network (VNet), which is used to provide private IP connectivity for Azure resources; it is not the primary purpose of Standard public IP address.

 

Question 15

To apply custom routing decisions to traffic leaving selected subnets, which Azure configuration should be selected?

1. Connectivity troubleshooting
2. Non-transitive peering
3. Route table
4. Longest-prefix match

Correct Answer: C

 

Correct Answer

Answer C is correct because Route table is an Azure resource containing user-defined routes that can be associated with one or more subnets. It directly supports the requirement to apply custom routing decisions to traffic leaving selected subnets.

Incorrect Answers

Answer A is incorrect because Connectivity troubleshooting is used to identify which Azure networking control is preventing expected communication; it does not provide the capability described in the scenario.

Answer B is incorrect because Non-transitive peering is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it does not provide the capability described in the scenario.

Answer D is incorrect because Longest-prefix match is used to determine which Azure route is used when multiple routes match a destination; it does not provide the capability described in the scenario.

 

Question 16

A network design associates a Route table with one or more subnets. What is the main purpose of that resource?

1. Apply custom routing decisions to traffic leaving selected subnets
2. Troubleshoot the actual routes Azure will consider for a VM network interface
3. Segment a virtual network into smaller address ranges for routing and security administration
4. Determine which Azure route is used when multiple routes match a destination

Correct Answer: A

 

Correct Answer

Answer A is correct because Route table is an Azure resource containing user-defined routes that can be associated with one or more subnets. Its intended administrative use is to apply custom routing decisions to traffic leaving selected subnets.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Effective routes, which is used to troubleshoot the actual routes Azure will consider for a VM network interface; it is not the primary purpose of Route table.

Answer C is incorrect because that outcome belongs to Subnet, which is used to segment a virtual network into smaller address ranges for routing and security administration; it is not the primary purpose of Route table.

Answer D is incorrect because that outcome belongs to Longest-prefix match, which is used to determine which Azure route is used when multiple routes match a destination; it is not the primary purpose of Route table.

 

Question 17

To send traffic through a chosen next hop such as a virtual appliance or gateway, which Azure configuration should be selected?

1. Virtual network peering
2. Gateway transit
3. Standard public IP address
4. User-defined route (UDR)

Correct Answer: D

 

Correct Answer

Answer D is correct because User-defined route (UDR) is a custom route that overrides or supplements Azure system routing for a destination prefix. It directly supports the requirement to send traffic through a chosen next hop such as a virtual appliance or gateway.

Incorrect Answers

Answer A is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

Answer B is incorrect because Gateway transit is used to share a connectivity gateway with a peered virtual network where supported; it does not provide the capability described in the scenario.

Answer C is incorrect because Standard public IP address is used to give an Azure resource a public endpoint using the supported Standard public IP model; it does not provide the capability described in the scenario.

 

Question 18

For User-defined route (UDR), which administrative outcome is expected?

1. Avoid assuming that peering creates automatic transitive routing across multiple VNets
2. Send traffic through a chosen next hop such as a virtual appliance or gateway
3. Control the addresses used by a virtual machine network interface
4. Provide private IP connectivity for Azure resources

Correct Answer: B

 

Correct Answer

Answer B is correct because User-defined route (UDR) is a custom route that overrides or supplements Azure system routing for a destination prefix. Its intended administrative use is to send traffic through a chosen next hop such as a virtual appliance or gateway.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Non-transitive peering, which is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it is not the primary purpose of User-defined route (UDR).

Answer C is incorrect because that outcome belongs to Network interface IP configuration, which is used to control the addresses used by a virtual machine network interface; it is not the primary purpose of User-defined route (UDR).

Answer D is incorrect because that outcome belongs to Virtual network (VNet), which is used to provide private IP connectivity for Azure resources; it is not the primary purpose of User-defined route (UDR).

 

Question 19

To determine which Azure route is used when multiple routes match a destination, which Azure configuration should be selected?

1. Longest-prefix match
2. Virtual appliance next hop
3. Connectivity troubleshooting
4. User-defined route (UDR)

Correct Answer: A

 

Correct Answer

Answer A is correct because Longest-prefix match is the route-selection rule that chooses the most specific matching address prefix before considering competing route sources. It directly supports the requirement to determine which Azure route is used when multiple routes match a destination.

Incorrect Answers

Answer B is incorrect because Virtual appliance next hop is used to steer subnet traffic through a firewall or other routing appliance; it does not provide the capability described in the scenario.

Answer C is incorrect because Connectivity troubleshooting is used to identify which Azure networking control is preventing expected communication; it does not provide the capability described in the scenario.

Answer D is incorrect because User-defined route (UDR) is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it does not provide the capability described in the scenario.

 

Question 20

For Longest-prefix match, which administrative outcome is expected?

1. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing
2. Determine which Azure route is used when multiple routes match a destination
3. Avoid assuming that peering creates automatic transitive routing across multiple VNets
4. Share a connectivity gateway with a peered virtual network where supported

Correct Answer: B

 

Correct Answer

Answer B is correct because Longest-prefix match is the route-selection rule that chooses the most specific matching address prefix before considering competing route sources. Its intended administrative use is to determine which Azure route is used when multiple routes match a destination.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Virtual network peering, which is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it is not the primary purpose of Longest-prefix match.

Answer C is incorrect because that outcome belongs to Non-transitive peering, which is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it is not the primary purpose of Longest-prefix match.

Answer D is incorrect because that outcome belongs to Gateway transit, which is used to share a connectivity gateway with a peered virtual network where supported; it is not the primary purpose of Longest-prefix match.

 

Question 21

To force a custom path when prefix length is the same, which Azure configuration should be selected?

1. Non-transitive peering
2. UDR route preference
3. Virtual appliance next hop
4. Effective routes

Correct Answer: B

 

Correct Answer

Answer B is correct because UDR route preference is the route-source behavior in which a user-defined route is preferred over BGP and system routes when equally specific routes compete. It directly supports the requirement to force a custom path when prefix length is the same.

Incorrect Answers

Answer A is incorrect because Non-transitive peering is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it does not provide the capability described in the scenario.

Answer C is incorrect because Virtual appliance next hop is used to steer subnet traffic through a firewall or other routing appliance; it does not provide the capability described in the scenario.

Answer D is incorrect because Effective routes is used to troubleshoot the actual routes Azure will consider for a VM network interface; it does not provide the capability described in the scenario.

 

Question 22

For UDR route preference, which administrative outcome is expected?

1. Give an Azure resource a public endpoint using the supported Standard public IP model
2. Send traffic through a chosen next hop such as a virtual appliance or gateway
3. Identify which Azure networking control is preventing expected communication
4. Force a custom path when prefix length is the same

Correct Answer: D

 

Correct Answer

Answer D is correct because UDR route preference is the route-source behavior in which a user-defined route is preferred over BGP and system routes when equally specific routes compete. Its intended administrative use is to force a custom path when prefix length is the same.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Standard public IP address, which is used to give an Azure resource a public endpoint using the supported Standard public IP model; it is not the primary purpose of UDR route preference.

Answer B is incorrect because that outcome belongs to User-defined route (UDR), which is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it is not the primary purpose of UDR route preference.

Answer C is incorrect because that outcome belongs to Connectivity troubleshooting, which is used to identify which Azure networking control is preventing expected communication; it is not the primary purpose of UDR route preference.

 

Question 23

To steer subnet traffic through a firewall or other routing appliance, which Azure configuration should be selected?

1. Non-transitive peering
2. Virtual appliance next hop
3. Virtual network (VNet)
4. Route table

Correct Answer: B

 

Correct Answer

Answer B is correct because Virtual appliance next hop is a UDR next-hop type that sends traffic to a specified network virtual appliance IP address. It directly supports the requirement to steer subnet traffic through a firewall or other routing appliance.

Incorrect Answers

Answer A is incorrect because Non-transitive peering is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it does not provide the capability described in the scenario.

Answer C is incorrect because Virtual network (VNet) is used to provide private IP connectivity for Azure resources; it does not provide the capability described in the scenario.

Answer D is incorrect because Route table is used to apply custom routing decisions to traffic leaving selected subnets; it does not provide the capability described in the scenario.

 

Question 24

For Virtual appliance next hop, which administrative outcome is expected?

1. Steer subnet traffic through a firewall or other routing appliance
2. Troubleshoot the actual routes Azure will consider for a VM network interface
3. Segment a virtual network into smaller address ranges for routing and security administration
4. Enable deterministic routing between virtual networks or connected environments

Correct Answer: A

 

Correct Answer

Answer A is correct because Virtual appliance next hop is a UDR next-hop type that sends traffic to a specified network virtual appliance IP address. Its intended administrative use is to steer subnet traffic through a firewall or other routing appliance.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Effective routes, which is used to troubleshoot the actual routes Azure will consider for a VM network interface; it is not the primary purpose of Virtual appliance next hop.

Answer C is incorrect because that outcome belongs to Subnet, which is used to segment a virtual network into smaller address ranges for routing and security administration; it is not the primary purpose of Virtual appliance next hop.

Answer D is incorrect because that outcome belongs to Non-overlapping address spaces, which is used to enable deterministic routing between virtual networks or connected environments; it is not the primary purpose of Virtual appliance next hop.

 

Question 25

To troubleshoot the actual routes Azure will consider for a VM network interface, which Azure configuration should be selected?

1. Subnet
2. Effective routes
3. Connectivity troubleshooting
4. Virtual network peering

Correct Answer: B

 

Correct Answer

Answer B is correct because Effective routes is the combined routing table calculated for a network interface from system routes, BGP routes, and applicable user-defined routes. It directly supports the requirement to troubleshoot the actual routes Azure will consider for a VM network interface.

Incorrect Answers

Answer A is incorrect because Subnet is used to segment a virtual network into smaller address ranges for routing and security administration; it does not provide the capability described in the scenario.

Answer C is incorrect because Connectivity troubleshooting is used to identify which Azure networking control is preventing expected communication; it does not provide the capability described in the scenario.

Answer D is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

 

Question 26

For Effective routes, which administrative outcome is expected?

1. Troubleshoot the actual routes Azure will consider for a VM network interface
2. Apply custom routing decisions to traffic leaving selected subnets
3. Share a connectivity gateway with a peered virtual network where supported
4. Segment a virtual network into smaller address ranges for routing and security administration

Correct Answer: A

 

Correct Answer

Answer A is correct because Effective routes is the combined routing table calculated for a network interface from system routes, BGP routes, and applicable user-defined routes. Its intended administrative use is to troubleshoot the actual routes Azure will consider for a VM network interface.

Incorrect Answers

Answer B is incorrect because that outcome belongs to Route table, which is used to apply custom routing decisions to traffic leaving selected subnets; it is not the primary purpose of Effective routes.

Answer C is incorrect because that outcome belongs to Gateway transit, which is used to share a connectivity gateway with a peered virtual network where supported; it is not the primary purpose of Effective routes.

Answer D is incorrect because that outcome belongs to Subnet, which is used to segment a virtual network into smaller address ranges for routing and security administration; it is not the primary purpose of Effective routes.

 

Question 27

To control the addresses used by a virtual machine network interface, which Azure configuration should be selected?

1. Network interface IP configuration
2. Non-overlapping address spaces
3. Virtual network (VNet)
4. Non-transitive peering

Correct Answer: A

 

Correct Answer

Answer A is correct because Network interface IP configuration is the NIC configuration that associates private and optional public IP addressing with a VM interface. It directly supports the requirement to control the addresses used by a virtual machine network interface.

Incorrect Answers

Answer B is incorrect because Non-overlapping address spaces is used to enable deterministic routing between virtual networks or connected environments; it does not provide the capability described in the scenario.

Answer C is incorrect because Virtual network (VNet) is used to provide private IP connectivity for Azure resources; it does not provide the capability described in the scenario.

Answer D is incorrect because Non-transitive peering is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it does not provide the capability described in the scenario.

 

Question 28

For Network interface IP configuration, which administrative outcome is expected?

1. Send traffic through a chosen next hop such as a virtual appliance or gateway
2. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing
3. Identify which Azure networking control is preventing expected communication
4. Control the addresses used by a virtual machine network interface

Correct Answer: D

 

Correct Answer

Answer D is correct because Network interface IP configuration is the NIC configuration that associates private and optional public IP addressing with a VM interface. Its intended administrative use is to control the addresses used by a virtual machine network interface.

Incorrect Answers

Answer A is incorrect because that outcome belongs to User-defined route (UDR), which is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it is not the primary purpose of Network interface IP configuration.

Answer B is incorrect because that outcome belongs to Virtual network peering, which is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it is not the primary purpose of Network interface IP configuration.

Answer C is incorrect because that outcome belongs to Connectivity troubleshooting, which is used to identify which Azure networking control is preventing expected communication; it is not the primary purpose of Network interface IP configuration.

 

Question 29

To identify which Azure networking control is preventing expected communication, which Azure configuration should be selected?

1. Non-overlapping address spaces
2. Virtual network peering
3. Connectivity troubleshooting
4. Non-transitive peering

Correct Answer: C

 

Correct Answer

Answer C is correct because Connectivity troubleshooting is the process of checking routes, NSGs, name resolution, endpoints, and reachability to isolate a network failure. It directly supports the requirement to identify which Azure networking control is preventing expected communication.

Incorrect Answers

Answer A is incorrect because Non-overlapping address spaces is used to enable deterministic routing between virtual networks or connected environments; it does not provide the capability described in the scenario.

Answer B is incorrect because Virtual network peering is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it does not provide the capability described in the scenario.

Answer D is incorrect because Non-transitive peering is used to avoid assuming that peering creates automatic transitive routing across multiple VNets; it does not provide the capability described in the scenario.

 

Question 30

For Connectivity troubleshooting, which administrative outcome is expected?

1. Allow resources in separate VNets to communicate using private IP addresses with low-latency routing
2. Send traffic through a chosen next hop such as a virtual appliance or gateway
3. Identify which Azure networking control is preventing expected communication
4. Apply custom routing decisions to traffic leaving selected subnets

Correct Answer: C

 

Correct Answer

Answer C is correct because Connectivity troubleshooting is the process of checking routes, NSGs, name resolution, endpoints, and reachability to isolate a network failure. Its intended administrative use is to identify which Azure networking control is preventing expected communication.

Incorrect Answers

Answer A is incorrect because that outcome belongs to Virtual network peering, which is used to allow resources in separate VNets to communicate using private IP addresses with low-latency routing; it is not the primary purpose of Connectivity troubleshooting.

Answer B is incorrect because that outcome belongs to User-defined route (UDR), which is used to send traffic through a chosen next hop such as a virtual appliance or gateway; it is not the primary purpose of Connectivity troubleshooting.

Answer D is incorrect because that outcome belongs to Route table, which is used to apply custom routing decisions to traffic leaving selected subnets; it is not the primary purpose of Connectivity troubleshooting.