024 n
Expected Questions and Answers n n n n
(Verified by Expert) n n
1. Question n
The Azure Virtual Machines are deployed on a virtual network.The hostnameis define
n n n n n n n n n n n n n
d for all the virtual machines. It is required to perform a DNS query tofind the virtual ma
n n n n n n n n n n n n n n n n n n
chine as it resolves the hostname to IP. DNS queries shouldbe internal to the virtual ne
n n n n n n n n n n n n n n n n
twork. Which component should be used? ANS AzureProvided DNS
n n n n n nn nn n n
2. What is the correct CLI command to view DNS records?
n n n n n n n n n
A
az dns record-set list --zone-name sampleref.com network
n n n n n n
B
1n/n24
,az dns network record-set list --zone-name sampleref.com
n n n n n n
C
az record- dns network set list --zone-name sampleref.com
n n n n n n n
D
az network dns record-set list --zone-
n n n n n
name sampleref.com Daz network dns record-set list --zone-
n n n n n n n n
name sampleref.com n
3. Custom DNS settings can be configured at the VNet level, and the networkinterfac
n n n n n n n n n n n n n
e level, but not at the
n n n n n level. ANS subnet level. n nn n
To use specific settings for an individual subnet, you must configure those settingson
n n n n n n n n n n n n n n
each network interface in the subnet.
n n n n n
4. NSG Rule priority ranges ANS Priority values start from 100 and go to 4096 (andf
n n n n nn n n n n n n n n n n
rom 65001 to 65003 for default rules).
n n n n n n
5. IRT NSGs what are service tags? ANS Service tags are used in NSG rules as a quick
n n n n n n nn n n n n n n n n n
and reliable way of creating rules that control traffic to each service.Typically,they are
n n n n n n n n n n n n n n n
n used in outbound rules to control which other Azure services the VMs ina VNet can o
n n n n n n n n n n n n n n n n
r cannot access.
n n
2n/n24
,6. what are the default NSG rules and their priorities? ANS Virtual network Trafficori
n n n n n n n n n nn n n n
ginating and ending in a virtual network is allowed both in inbound and outbounddirec
n n n n n n n n n n n n n n
tions.
Internet Outbound traffic is allowed, but inbound traffic is blocked.
n n n n n n n n n
3n/n24
, Load balancer Allows Azure load balancer to probe the health of your VMs and role i
n n n n n n n n n n n n n n n
nstances. If you are not using a load balanced set, you can override this rule.
n n n n n n n n n n n n n n
Inbound n
AllowVNetInBound 65000 n
AllowAzureLoad BalancerInBound 65001 n n
DenyAllInBound 65500 n
Outbound n
AllowVNet OutBound 65000 n n
AllowInternet OutBound 65001 n n
DenyAllOutBound 65500 n
7. caveat regarding the NSG Load Balancer security rule ANS The Load Balancerdef
n n n n n n n n nn n n n
ault rule uses the AzureLoadBalancer service tag. This applies only to Azure load bal
n n n n n n n n n n n n n
ancer health probes, which originate at the load balancer. It does not applyto traffic re
n n n n n n n n n n n n n n n
ceived through the load balancer, which retain their original source IP address and p
n n n n n n n n n n n n n
ort.
8. What is an application security group (ASG) ANS Application security groups ena
n n n n n n n nn n n n
ble you to configure network security as a natural extension of an application'sstruct
n n n n n n n n n n n n n
ure, allowing you to group virtual machines and define network security policies bas
n n n n n n n n n n n n
ed on those groups. You can reuse your security policy at scale without the manual m
n n n n n n n n n n n n n n n
aintenance of explicit IP addresses. The platform handles the complexity of explicit I
n n n n n n n n n n n n
4n/n24