WGU D338 EXAM 2025/2026 QUESTIONS
AND ANSWERS 100% PASS.
Azure VNets and on-premises networks - ANS site-to-site VPN
What is a virtual network gateway - ANS It allows you to create connections from your virtual
network to other networks
What is the minimum size for a gateway subnet - ANS CIDR /29
Steps to Create a VPN Gateway using the Azure portal - ANS 1. Add a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - ANS A secure and reliable private connection between your on-premises
network and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - ANS Site-to-Site VPN
connections only provide connectivity to your Azure VNet, whereas ExpressRoute provides
connectivity to all Microsoft cloud services
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
,Azure Private Peering - ANS Provides connectivity over the Intranet address space into your
Azure virtual network. This peering is considered a trusted extension of your core network into
Azure.
Microsoft Peering - ANS Provides connectivity over the Internet address space into Microsoft
services such as Office 365, Dynamics 365, and Internet-facing endpoints of Azure platform
(PaaS) services.
ExpressRoute gateway - ANS a virtual network gateway, created with the ExpressRoute
option (rather than the VPN option, used to create VPN gateways). Just as with VPN gateways,
the ExpressRoute gateway must be created in the gateway subnet of the virtual network.
Azure Virtual WAN - ANS Creates a unified wide area network (WAN) that connects local and
remote sites.
Basic vs Standard WAN - ANS With Basic WAN, you can only create Basic Hubs. Basic Hubs are
only capable of creating site-to-site connections. For any other connectivity, it is recommended
to use Standard WAN.
Performance Monitor - ANS Performance Monitor enables you to monitor packet loss and
latency between your endpoints, both in Azure and on-premises. A VM or server running the
Log Analytics agent is required at both ends of each monitored connection.
Service Connectivity Monitor - ANS Monitors outbound connectivity from nodes on your
network to any external service with an open TCP port, such as web sites, applications, or
databases.
ExpressRoute Monitor - ANS Allows you to monitor end-to-end network connectivity and
performance between on-premises and Azure endpoints over ExpressRoute connections. It can
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, auto-detect ExpressRoute circuits and your network topology, and track bandwidth utilization,
packet loss and network latency.
Azure Network Watcher - ANS Provides a central hub for a wide range of network monitoring
and diagnostic tools.
IP Flow Verify - ANS The IP Flow Verify tool provides a quick and easy way to test whether a
given network flow will be allowed into or out of an Azure virtual machine. It will report
whether the requested traffic is allowed or blocked, and in the latter case, which NSG rule is
blocking the flow. It is a useful tool for verifying that NSGs are correctly configured.
Next Hop - ANS The Next Hop tool provides a useful way to understand how a VM's
outbound traffic is being directed. For a given outbound flow, it shows the next hop IP address
and type and the route table ID of any user-defined route in effect
Packet Captures - ANS The Packet Capture tool allows you to capture network packets
entering or leaving your virtual machines. It is a powerful tool for deep network diagnostics. Use
WireShark or Microsoft Message Analyzer to read the file
Network Topology - ANS Provides a diagrammatic view of the resources in your virtual
network. It is not a diagnostic or alerting tool. It is a quick and easy way to review your network
resources and manually check for misconfiguration.
Network Watcher tools - ANS 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
3 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
AND ANSWERS 100% PASS.
Azure VNets and on-premises networks - ANS site-to-site VPN
What is a virtual network gateway - ANS It allows you to create connections from your virtual
network to other networks
What is the minimum size for a gateway subnet - ANS CIDR /29
Steps to Create a VPN Gateway using the Azure portal - ANS 1. Add a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - ANS A secure and reliable private connection between your on-premises
network and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - ANS Site-to-Site VPN
connections only provide connectivity to your Azure VNet, whereas ExpressRoute provides
connectivity to all Microsoft cloud services
1 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
,Azure Private Peering - ANS Provides connectivity over the Intranet address space into your
Azure virtual network. This peering is considered a trusted extension of your core network into
Azure.
Microsoft Peering - ANS Provides connectivity over the Internet address space into Microsoft
services such as Office 365, Dynamics 365, and Internet-facing endpoints of Azure platform
(PaaS) services.
ExpressRoute gateway - ANS a virtual network gateway, created with the ExpressRoute
option (rather than the VPN option, used to create VPN gateways). Just as with VPN gateways,
the ExpressRoute gateway must be created in the gateway subnet of the virtual network.
Azure Virtual WAN - ANS Creates a unified wide area network (WAN) that connects local and
remote sites.
Basic vs Standard WAN - ANS With Basic WAN, you can only create Basic Hubs. Basic Hubs are
only capable of creating site-to-site connections. For any other connectivity, it is recommended
to use Standard WAN.
Performance Monitor - ANS Performance Monitor enables you to monitor packet loss and
latency between your endpoints, both in Azure and on-premises. A VM or server running the
Log Analytics agent is required at both ends of each monitored connection.
Service Connectivity Monitor - ANS Monitors outbound connectivity from nodes on your
network to any external service with an open TCP port, such as web sites, applications, or
databases.
ExpressRoute Monitor - ANS Allows you to monitor end-to-end network connectivity and
performance between on-premises and Azure endpoints over ExpressRoute connections. It can
2 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
, auto-detect ExpressRoute circuits and your network topology, and track bandwidth utilization,
packet loss and network latency.
Azure Network Watcher - ANS Provides a central hub for a wide range of network monitoring
and diagnostic tools.
IP Flow Verify - ANS The IP Flow Verify tool provides a quick and easy way to test whether a
given network flow will be allowed into or out of an Azure virtual machine. It will report
whether the requested traffic is allowed or blocked, and in the latter case, which NSG rule is
blocking the flow. It is a useful tool for verifying that NSGs are correctly configured.
Next Hop - ANS The Next Hop tool provides a useful way to understand how a VM's
outbound traffic is being directed. For a given outbound flow, it shows the next hop IP address
and type and the route table ID of any user-defined route in effect
Packet Captures - ANS The Packet Capture tool allows you to capture network packets
entering or leaving your virtual machines. It is a powerful tool for deep network diagnostics. Use
WireShark or Microsoft Message Analyzer to read the file
Network Topology - ANS Provides a diagrammatic view of the resources in your virtual
network. It is not a diagnostic or alerting tool. It is a quick and easy way to review your network
resources and manually check for misconfiguration.
Network Watcher tools - ANS 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
3 @COPYRIGHT 2025/2026 ALLRIGHTS RESERVED.
