VNets, NSGs, load balancers, DNS, VPN gateway, Azure Monitor, Log Analytics and backup and recovery.
39 cards · basic cards · AI-written, checked twice. Edit anything.
- What address space can be used for an Azure Virtual Network?
Show answer
Any private IP address range (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 or other RFC 1918 ranges)
- Can a subnet in a VNet span multiple Azure regions?
Show answer
No, a subnet must reside entirely within a single region
- What is the minimum subnet prefix size allowed in Azure?
Show answer
/29 (provides 8 addresses, 5 of which are reserved by the system)
- How many virtual networks can a single subscription have by default?
Show answer
50 virtual networks (can be increased by submitting a quota increase request)
- What are Azure Virtual Network service endpoints?
Show answer
Direct connections that provide secure, private access to Azure services without routing traffic over the public internet
- Does intra-region VNet peering incur data transfer charges?
Show answer
No, peering traffic within the same region is free
- What is the purpose of user-defined routes in Azure?
Show answer
To override default system routes and direct traffic through custom paths, such as through a network appliance
- How many IP addresses per subnet are reserved by Azure?
Show answer
5 addresses: network address, gateway, DHCP server, broadcast, and one reserved for future use
- What is the primary purpose of a Network Security Group?
Show answer
To filter inbound and outbound network traffic for Azure resources using allow and deny rules
- Can NSG rules evaluate both source and destination IP addresses?
Show answer
Yes, rules can specify source IP, destination IP, ports, and protocols for filtering
- What is the priority range for NSG rules?
Show answer
100 to 4096, where lower numbers indicate higher priority
- Can a single subnet have multiple Network Security Groups applied to it?
Show answer
No, only one NSG can be associated with a subnet, though one NSG can protect multiple subnets
- When both allow and deny NSG rules match traffic, which takes precedence?
Show answer
The deny rule takes precedence, blocking the traffic
- Name three resource types that NSGs can protect
Show answer
Subnets, network interface cards (NICs), and virtual machines through their NICs
- What are the two main types of Azure load balancers?
Show answer
Standard Load Balancer and Basic Load Balancer (Basic is deprecated)