Question

Difficulty: EasyConfigure Virtual Network Peering

You have two virtual networks named VNet-Prod (10.100.0.0/1610.100.0.0/16) and VNet-Dev (10.200.0.0/1610.200.0.0/16) with virtual machines deployed in their subnets. When configuring virtual network peering between VNet-Prod and VNet-Dev, you must enable 'Allow gateway transit', 'Use remote gateways', and 'Allow forwarded traffic' to establish basic bidirectional IP connectivity between the virtual machines. Is this statement true or false?

Answer: Answer

Answer

The statement is false.
The correct answer is false because basic virtual network peering between two networks allows direct, bidirectional IP connectivity by default without requiring gateway transit, remote gateways, or forwarded traffic configurations.

Step-by-Step Solution

1
Identify the requirements for basic virtual network peering.
Virtual network peering provides direct, low-latency, bidirectional IP connectivity between VMs in peered networks using Azure's backbone network.
To establish basic peering, you only need to configure the peering link between the two networks (which creates reciprocal links in both directions) with the default settings.
2
Evaluate the purpose of 'Allow gateway transit' and 'Use remote gateways'.
These settings are used for gateway sharing, allowing resources in one VNet to use a virtual network gateway located in the peered VNet.
Since neither VNet requires a gateway for direct spoke-to-spoke communication, these settings are not needed for basic connectivity.
3
Evaluate the purpose of 'Allow forwarded traffic'.
This setting allows a virtual network to receive traffic that did not originate from the peered virtual network itself (e.g., traffic forwarded by a firewall or NVA).
Basic direct communication between the two VNets involves traffic originating directly from VMs within the peered networks, so forwarded traffic settings are not required.

Key Concept

Basic virtual network peering allows direct, bidirectional communication by default without requiring gateway sharing or forwarded traffic settings.
Rate this question