exam questions

Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 3 question 2 discussion

Actual exam question from Microsoft's AZ-700
Question #: 2
Topic #: 3
[All AZ-700 Questions]

HOTSPOT -
You have an Azure subscription that contains the route tables and routes shown in the following table.

The subscription contains the subnets shown in the following table.

The subscription contains the virtual machines shown in the following table.

The subscription contains the local network gateways shown in the following table.

There is a Site-to-Site VPN connection to each local network gateway.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
jellybiscuit
Highly Voted 2 years, 5 months ago
The answers depend on some assumptions. Is there actually a vpn gateway sitting in that gateway subnet? If so, is it configured for BGP? If so, then... N - all outbound traffic from VM2 is sent to the internet N - by default, subnets within a vnet can communicate. (I'm assuming that a NSG isn't blocking) Y - all outbound traffic from VM1 is sent to the VPN gateway BGP eliminates the need for a local azure route table.
upvoted 41 times
Ajdlfasudfo0
2 years, 3 months ago
VPN: You can, optionally use BGP. For details, see BGP with site-to-site VPN connections. There is no mentioning of BGP so you can't simply assume we have it set up https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview#border-gateway-protocol
upvoted 2 times
...
...
kimalto452
Highly Voted 2 years, 6 months ago
incorrect, the answer is NYY
upvoted 27 times
LearnICC
3 days, 9 hours ago
NYY, routing between subnets in vnet can be overwritten by route tables - and this is done by RT1 https://learn.microsoft.com/en-us/azure/virtual-network/tutorial-create-route-table?tabs=portal
upvoted 1 times
...
aklas
1 year, 9 months ago
No you're wrong. Given answer is correct. The subnets are in the same VNet so there is a local route between them which is more specific than 0.0.0.0
upvoted 14 times
LearnICC
3 days, 9 hours ago
internal vnet routing can be overwritten by route tables
upvoted 1 times
...
CristianM99
1 year, 7 months ago
Aklas explanation is correct. The answer is NNY
upvoted 5 times
...
...
...
wxs90
Most Recent 9 months ago
Correct. N, N, Y
upvoted 2 times
...
Lazylinux
1 year, 7 months ago
Given answer is correct N- all outbound traffic from VM2 is sent to the internet by default as use route table RT2 N - Since both subnets are part of the same vNET1 hence communicate directly with each other Y - Since VM1 uses RT1 and RT1 has VPNGWY as its default GWY then VM1 uses this for its internet access
upvoted 7 times
...
occupatissimo
1 year, 10 months ago
NNY Third answer look at: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm.
upvoted 3 times
...
khanda
1 year, 11 months ago
Correct answer: NNY Check comments
upvoted 2 times
...
DerekKey
2 years, 2 months ago
No | No | Yes Yes -> Forced tunneling is carried out by using a virtual private network (VPN) tunnel; this tunnel requires a default site, a local gateway where all the Azure Internet-bound traffic is redirected.
upvoted 6 times
...
NoeHdzMll
2 years, 3 months ago
Correct answer N - all outbound traffic from VM2 is sent to the internet by default N - the effective route table show the all the the subnet on the same VNET as a more specific one than the default route and Gateway routes. So subnets within a vnet can communicate can communicate directly. Y - all outbound traffic from VM1 is sent to the VPN gateway
upvoted 3 times
...
Takloy
2 years, 3 months ago
By New York Site-to-site- VPN Connection, I assume whenever the traffic hits the VPN Gateway from the default route in Route1. Am I right? so my answer is NYY
upvoted 1 times
...
Edzor
2 years, 4 months ago
Given answer is correct, since New York local gateway is the default site (forced tunneling) to the VPN https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm (GatewayDefaultSite)
upvoted 3 times
...
DeepMoon
2 years, 5 months ago
Given answers are wrong. Don't think too hard in trying to draw a logical network diagram in your head. Simply realize NY is 10.9.0.0 (not on any of the route tables). So nothing is routed through the NY. All answers are Q1: No Q2: No Q3: No
upvoted 12 times
Sergovladi
1 month, 4 weeks ago
Correct. Q3 is No because no forced tunnelling, no Default Site in routing
upvoted 1 times
...
[Removed]
2 years, 5 months ago
I agree, there is no default route towards NY
upvoted 3 times
...
...
DeepMoon
2 years, 5 months ago
I have no idea of creating a logical diagram of this network. Can someone help me out here? Where is NY & Seattle relative to subnet1 & subnet 2. My drawing would be | Vnet1- boundary subnet1(vm1) | subnet2 (vm2) vnet1-boundary | Which way is internet? Which way is VirtualNetworkGateway? Which way is NY Which way is Seattle?
upvoted 2 times
...
AdityaGupta
2 years, 5 months ago
Given answers are correct.
upvoted 5 times
...
tkcltoh
2 years, 5 months ago
default route is 0.0.0.0/0 internet. RT1 route is UDR therefore VM1 to VM2 is communicates via VPN
upvoted 1 times
Prutser2
2 years, 5 months ago
from subnet1 to subnet 2 (vm1 to VM2), uses intra vnet, as its a longer match, would not choose default gateway
upvoted 3 times
...
...
RollinDeep
2 years, 6 months ago
NNY. VM1 to VM2 are routed within Vnet1. RT1 and RT2 define default routes.
upvoted 5 times
...
Cristoicach91
2 years, 6 months ago
correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago