WGU D338 Exam 141 Questions with Verified Answers
Azure VNets and on-premises networks - CORRECT ANSWER site-to-site VPN
What is a virtual network gateway - CORRECT ANSWER It allows you to create
connections from your virtual network to other networks
What is the minimum size for a gateway subnet - CORRECT ANSWER CIDR /29
Steps to Create a VPN Gateway using the Azure portal - CORRECT ANSWER 1. Add
a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - CORRECT ANSWER A secure and reliable private connection
between your on-premises network and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - CORRECT
ANSWER Site-to-Site VPN connections only provide connectivity to your Azure
VNet, whereas ExpressRoute provides connectivity to all Microsoft cloud services
Azure Private Peering - CORRECT ANSWER Provides connectivity over the Intranet
address space into your Azure virtual network. This peering is considered a
trusted extension of your core network into Azure.
Microsoft Peering - CORRECT ANSWER Provides connectivity over the Internet
address space into Microsoft services such as Office 365, Dynamics 365, and
Internet-facing endpoints of Azure platform (PaaS) services.
ExpressRoute gateway - CORRECT ANSWER a virtual network gateway, created
with the ExpressRoute option (rather than the VPN option, used to create VPN
gateways). Just as with VPN gateways, the ExpressRoute gateway must be created
in the gateway subnet of the virtual network.
,Azure Virtual WAN - CORRECT ANSWER Creates a unified wide area network
(WAN) that connects local and remote sites.
Basic vs Standard WAN - CORRECT ANSWER With Basic WAN, you can only create
Basic Hubs. Basic Hubs are only capable of creating site-to-site connections. For
any other connectivity, it is recommended to use Standard WAN.
Performance Monitor - CORRECT ANSWER Performance Monitor enables you to
monitor packet loss and latency between your endpoints, both in Azure and on-
premises. A VM or server running the Log Analytics agent is required at both ends
of each monitored connection.
Service Connectivity Monitor - CORRECT ANSWER Monitors outbound
connectivity from nodes on your network to any external service with an open
TCP port, such as web sites, applications, or databases.
ExpressRoute Monitor - CORRECT ANSWER Allows you to monitor end-to-end
network connectivity and performance between on-premises and Azure
endpoints over ExpressRoute connections. It can auto-detect ExpressRoute
circuits and your network topology, and track bandwidth utilization, packet loss
and network latency.
Azure Network Watcher - CORRECT ANSWER Provides a central hub for a wide
range of network monitoring and diagnostic tools.
IP Flow Verify - CORRECT ANSWER The IP Flow Verify tool provides a quick and
easy way to test whether a given network flow will be allowed into or out of an
Azure virtual machine. It will report whether the requested traffic is allowed or
blocked, and in the latter case, which NSG rule is blocking the flow. It is a useful
tool for verifying that NSGs are correctly configured.
Next Hop - CORRECT ANSWER The Next Hop tool provides a useful way to
understand how a VM's outbound traffic is being directed. For a given outbound
flow, it shows the next hop IP address and type and the route table ID of any user-
defined route in effect
, Packet Captures - CORRECT ANSWER The Packet Capture tool allows you to
capture network packets entering or leaving your virtual machines. It is a
powerful tool for deep network diagnostics. Use WireShark or Microsoft Message
Analyzer to read the file
Network Topology - CORRECT ANSWER Provides a diagrammatic view of the
resources in your virtual network. It is not a diagnostic or alerting tool. It is a quick
and easy way to review your network resources and manually check for
misconfiguration.
Network Watcher tools - CORRECT ANSWER 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
VPN Troubleshoot Tool - CORRECT ANSWER Provides automated diagnostics of
Azure VPN gateways and connections. The results provide a detailed report on
gateway health and connection health, providing accurate pointers regarding
common issues that might occur when enabling informed remediations.
Connection Troubleshoot Tool - CORRECT ANSWER A Network Watcher feature
designed to allow you to test the connectivity between an Azure VM or an App
Gateway and another endpoint—either another Azure VM, or an arbitrary
Internet or Intranet endpoint.
Hybrid networks - CORRECT ANSWER Commonly used for Intranet applications,
which may be hosted in Azure but only accessed from the on-premises network.
They are also used by Azure applications that require access to an on-premises
resource, such as a database.
Gateway subnets - CORRECT ANSWER A gateway subnet is a special type of
subnet that can only be used for virtual network gateways. VPN gateways can
only be deployed to a dedicated gateway subnet within the VNet
Azure VNets and on-premises networks - CORRECT ANSWER site-to-site VPN
What is a virtual network gateway - CORRECT ANSWER It allows you to create
connections from your virtual network to other networks
What is the minimum size for a gateway subnet - CORRECT ANSWER CIDR /29
Steps to Create a VPN Gateway using the Azure portal - CORRECT ANSWER 1. Add
a Subnet
2. Assign an address space using a /27 CIDR
ExpressRoute - CORRECT ANSWER A secure and reliable private connection
between your on-premises network and the Microsoft cloud.
Difference between ExpressRoute connections and Site-to-Site VPN - CORRECT
ANSWER Site-to-Site VPN connections only provide connectivity to your Azure
VNet, whereas ExpressRoute provides connectivity to all Microsoft cloud services
Azure Private Peering - CORRECT ANSWER Provides connectivity over the Intranet
address space into your Azure virtual network. This peering is considered a
trusted extension of your core network into Azure.
Microsoft Peering - CORRECT ANSWER Provides connectivity over the Internet
address space into Microsoft services such as Office 365, Dynamics 365, and
Internet-facing endpoints of Azure platform (PaaS) services.
ExpressRoute gateway - CORRECT ANSWER a virtual network gateway, created
with the ExpressRoute option (rather than the VPN option, used to create VPN
gateways). Just as with VPN gateways, the ExpressRoute gateway must be created
in the gateway subnet of the virtual network.
,Azure Virtual WAN - CORRECT ANSWER Creates a unified wide area network
(WAN) that connects local and remote sites.
Basic vs Standard WAN - CORRECT ANSWER With Basic WAN, you can only create
Basic Hubs. Basic Hubs are only capable of creating site-to-site connections. For
any other connectivity, it is recommended to use Standard WAN.
Performance Monitor - CORRECT ANSWER Performance Monitor enables you to
monitor packet loss and latency between your endpoints, both in Azure and on-
premises. A VM or server running the Log Analytics agent is required at both ends
of each monitored connection.
Service Connectivity Monitor - CORRECT ANSWER Monitors outbound
connectivity from nodes on your network to any external service with an open
TCP port, such as web sites, applications, or databases.
ExpressRoute Monitor - CORRECT ANSWER Allows you to monitor end-to-end
network connectivity and performance between on-premises and Azure
endpoints over ExpressRoute connections. It can auto-detect ExpressRoute
circuits and your network topology, and track bandwidth utilization, packet loss
and network latency.
Azure Network Watcher - CORRECT ANSWER Provides a central hub for a wide
range of network monitoring and diagnostic tools.
IP Flow Verify - CORRECT ANSWER The IP Flow Verify tool provides a quick and
easy way to test whether a given network flow will be allowed into or out of an
Azure virtual machine. It will report whether the requested traffic is allowed or
blocked, and in the latter case, which NSG rule is blocking the flow. It is a useful
tool for verifying that NSGs are correctly configured.
Next Hop - CORRECT ANSWER The Next Hop tool provides a useful way to
understand how a VM's outbound traffic is being directed. For a given outbound
flow, it shows the next hop IP address and type and the route table ID of any user-
defined route in effect
, Packet Captures - CORRECT ANSWER The Packet Capture tool allows you to
capture network packets entering or leaving your virtual machines. It is a
powerful tool for deep network diagnostics. Use WireShark or Microsoft Message
Analyzer to read the file
Network Topology - CORRECT ANSWER Provides a diagrammatic view of the
resources in your virtual network. It is not a diagnostic or alerting tool. It is a quick
and easy way to review your network resources and manually check for
misconfiguration.
Network Watcher tools - CORRECT ANSWER 1. IP Flow Verify
2. Next Hop
3. VPN Troubleshoot
4. Packet Capture
5. Connection Troubleshoot
6. Effective Security Rules
VPN Troubleshoot Tool - CORRECT ANSWER Provides automated diagnostics of
Azure VPN gateways and connections. The results provide a detailed report on
gateway health and connection health, providing accurate pointers regarding
common issues that might occur when enabling informed remediations.
Connection Troubleshoot Tool - CORRECT ANSWER A Network Watcher feature
designed to allow you to test the connectivity between an Azure VM or an App
Gateway and another endpoint—either another Azure VM, or an arbitrary
Internet or Intranet endpoint.
Hybrid networks - CORRECT ANSWER Commonly used for Intranet applications,
which may be hosted in Azure but only accessed from the on-premises network.
They are also used by Azure applications that require access to an on-premises
resource, such as a database.
Gateway subnets - CORRECT ANSWER A gateway subnet is a special type of
subnet that can only be used for virtual network gateways. VPN gateways can
only be deployed to a dedicated gateway subnet within the VNet
