WGU D338 Revision Exam Questions
With Guaranteed Pass Solutions.
Azure VNets and on-premises networks - Answer site-to-site VPN
What is a virtual network gateway - Answer It allows you to create connections from your virtual
network to other networks
What is the minimum size for a gateway subnet - Answer CIDR /29
Steps to Create a VPN Gateway using the Azure portal - Answer 1. Add a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - Answer A secure and reliable private connection between your on-premises network
and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - Answer Site-to-Site VPN
connections only provide connectivity to your Azure VNet, whereas ExpressRoute provides connectivity
to all Microsoft cloud services
Azure Private Peering - Answer Provides connectivity over the Intranet address space into your Azure
virtual network. This peering is considered a trusted extension of your core network into Azure.
Microsoft Peering - Answer Provides connectivity over the Internet address space into Microsoft
services such as Office 365, Dynamics 365, and Internet-facing endpoints of Azure platform (PaaS)
services.
ExpressRoute gateway - Answer a virtual network gateway, created with the ExpressRoute option
(rather than the VPN option, used to create VPN gateways). Just as with VPN gateways, the ExpressRoute
gateway must be created in the gateway subnet of the virtual network.
,Azure Virtual WAN - Answer Creates a unified wide area network (WAN) that connects local and
remote sites.
Basic vs Standard WAN - Answer With Basic WAN, you can only create Basic Hubs. Basic Hubs are only
capable of creating site-to-site connections. For any other connectivity, it is recommended to use
Standard WAN.
Performance Monitor - Answer Performance Monitor enables you to monitor packet loss and latency
between your endpoints, both in Azure and on-premises. A VM or server running the Log Analytics agent
is required at both ends of each monitored connection.
Service Connectivity Monitor - Answer Monitors outbound connectivity from nodes on your network to
any external service with an open TCP port, such as web sites, applications, or databases.
ExpressRoute Monitor - Answer Allows you to monitor end-to-end network connectivity and
performance between on-premises and Azure endpoints over ExpressRoute connections. It can auto-
detect ExpressRoute circuits and your network topology, and track bandwidth utilization, packet loss and
network latency.
Azure Network Watcher - Answer Provides a central hub for a wide range of network monitoring and
diagnostic tools.
IP Flow Verify - Answer The IP Flow Verify tool provides a quick and easy way to test whether a given
network flow will be allowed into or out of an Azure virtual machine. It will report whether the
requested traffic is allowed or blocked, and in the latter case, which NSG rule is blocking the flow. It is a
useful tool for verifying that NSGs are correctly configured.
Next Hop - Answer The Next Hop tool provides a useful way to understand how a VM's outbound
traffic is being directed. For a given outbound flow, it shows the next hop IP address and type and the
route table ID of any user-defined route in effect
Packet Captures - Answer The Packet Capture tool allows you to capture network packets entering or
leaving your virtual machines. It is a powerful tool for deep network diagnostics. Use WireShark or
Microsoft Message Analyzer to read the file
, Network Topology - Answer Provides a diagrammatic view of the resources in your virtual network. It is
not a diagnostic or alerting tool. It is a quick and easy way to review your network resources and
manually check for misconfiguration.
Network Watcher tools - Answer 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
VPN Troubleshoot Tool - Answer Provides automated diagnostics of Azure VPN gateways and
connections. The results provide a detailed report on gateway health and connection health, providing
accurate pointers regarding common issues that might occur when enabling informed remediations.
Connection Troubleshoot Tool - Answer A Network Watcher feature designed to allow you to test the
connectivity between an Azure VM or an App Gateway and another endpoint—either another Azure VM,
or an arbitrary Internet or Intranet endpoint.
Hybrid networks - Answer Commonly used for Intranet applications, which may be hosted in Azure but
only accessed from the on-premises network. They are also used by Azure applications that require
access to an on-premises resource, such as a database.
Gateway subnets - Answer A gateway subnet is a special type of subnet that can only be used for
virtual network gateways. VPN gateways can only be deployed to a dedicated gateway subnet within the
VNet
BGP (Border Gateway Protocol) - Answer Border Gateway Protocol (BGP) is a standard used in the
Internet to exchange routing information between networks. BGP can be optionally enabled on your VPN
gateway, if the on-premises gateway also supports it. If used, it enables the VPN gateway and the on-
premises gateway to exchange routing information automatically, avoiding the need to configure routes
manually.
With Guaranteed Pass Solutions.
Azure VNets and on-premises networks - Answer site-to-site VPN
What is a virtual network gateway - Answer It allows you to create connections from your virtual
network to other networks
What is the minimum size for a gateway subnet - Answer CIDR /29
Steps to Create a VPN Gateway using the Azure portal - Answer 1. Add a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - Answer A secure and reliable private connection between your on-premises network
and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - Answer Site-to-Site VPN
connections only provide connectivity to your Azure VNet, whereas ExpressRoute provides connectivity
to all Microsoft cloud services
Azure Private Peering - Answer Provides connectivity over the Intranet address space into your Azure
virtual network. This peering is considered a trusted extension of your core network into Azure.
Microsoft Peering - Answer Provides connectivity over the Internet address space into Microsoft
services such as Office 365, Dynamics 365, and Internet-facing endpoints of Azure platform (PaaS)
services.
ExpressRoute gateway - Answer a virtual network gateway, created with the ExpressRoute option
(rather than the VPN option, used to create VPN gateways). Just as with VPN gateways, the ExpressRoute
gateway must be created in the gateway subnet of the virtual network.
,Azure Virtual WAN - Answer Creates a unified wide area network (WAN) that connects local and
remote sites.
Basic vs Standard WAN - Answer With Basic WAN, you can only create Basic Hubs. Basic Hubs are only
capable of creating site-to-site connections. For any other connectivity, it is recommended to use
Standard WAN.
Performance Monitor - Answer Performance Monitor enables you to monitor packet loss and latency
between your endpoints, both in Azure and on-premises. A VM or server running the Log Analytics agent
is required at both ends of each monitored connection.
Service Connectivity Monitor - Answer Monitors outbound connectivity from nodes on your network to
any external service with an open TCP port, such as web sites, applications, or databases.
ExpressRoute Monitor - Answer Allows you to monitor end-to-end network connectivity and
performance between on-premises and Azure endpoints over ExpressRoute connections. It can auto-
detect ExpressRoute circuits and your network topology, and track bandwidth utilization, packet loss and
network latency.
Azure Network Watcher - Answer Provides a central hub for a wide range of network monitoring and
diagnostic tools.
IP Flow Verify - Answer The IP Flow Verify tool provides a quick and easy way to test whether a given
network flow will be allowed into or out of an Azure virtual machine. It will report whether the
requested traffic is allowed or blocked, and in the latter case, which NSG rule is blocking the flow. It is a
useful tool for verifying that NSGs are correctly configured.
Next Hop - Answer The Next Hop tool provides a useful way to understand how a VM's outbound
traffic is being directed. For a given outbound flow, it shows the next hop IP address and type and the
route table ID of any user-defined route in effect
Packet Captures - Answer The Packet Capture tool allows you to capture network packets entering or
leaving your virtual machines. It is a powerful tool for deep network diagnostics. Use WireShark or
Microsoft Message Analyzer to read the file
, Network Topology - Answer Provides a diagrammatic view of the resources in your virtual network. It is
not a diagnostic or alerting tool. It is a quick and easy way to review your network resources and
manually check for misconfiguration.
Network Watcher tools - Answer 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
VPN Troubleshoot Tool - Answer Provides automated diagnostics of Azure VPN gateways and
connections. The results provide a detailed report on gateway health and connection health, providing
accurate pointers regarding common issues that might occur when enabling informed remediations.
Connection Troubleshoot Tool - Answer A Network Watcher feature designed to allow you to test the
connectivity between an Azure VM or an App Gateway and another endpoint—either another Azure VM,
or an arbitrary Internet or Intranet endpoint.
Hybrid networks - Answer Commonly used for Intranet applications, which may be hosted in Azure but
only accessed from the on-premises network. They are also used by Azure applications that require
access to an on-premises resource, such as a database.
Gateway subnets - Answer A gateway subnet is a special type of subnet that can only be used for
virtual network gateways. VPN gateways can only be deployed to a dedicated gateway subnet within the
VNet
BGP (Border Gateway Protocol) - Answer Border Gateway Protocol (BGP) is a standard used in the
Internet to exchange routing information between networks. BGP can be optionally enabled on your VPN
gateway, if the on-premises gateway also supports it. If used, it enables the VPN gateway and the on-
premises gateway to exchange routing information automatically, avoiding the need to configure routes
manually.
