Examkin

Question

Difficulty: MediumConfigure Virtual Network Peering

An administrator configures virtual network peering between VNet-Hub (10.50.0.0/1610.50.0.0/16), which contains a virtual network gateway and a deployed virtual machine, and VNet-Spoke (10.60.0.0/1610.60.0.0/16), which has a deployed virtual machine but no gateway. The peering link from VNet-Hub to VNet-Spoke has 'Allow forwarded traffic' and 'Allow gateway transit' enabled. The peering link from VNet-Spoke to VNet-Hub has 'Allow forwarded traffic' enabled. To allow the virtual machine in VNet-Spoke to route transit traffic through the virtual network gateway in VNet-Hub, the administrator does not need to configure any additional peering settings.

Answer: Answer

Answer

False
The statement is false because establishing gateway transit requires configurations on both sides of the peering. While VNet-Hub has 'Allow gateway transit' enabled, the peering link from VNet-Spoke to VNet-Hub must also have 'Use remote gateways' enabled to allow VNet-Spoke to utilize the hub's gateway.

Step-by-Step Solution

1
Evaluate the current configuration of the peering links between VNet-Hub and VNet-Spoke.
The peering link from VNet-Hub to VNet-Spoke has 'Allow gateway transit' enabled, while the link from VNet-Spoke to VNet-Hub only has 'Allow forwarded traffic' enabled.
To determine what additional settings are required to establish gateway transit.
2
Determine the requirements for a spoke virtual network to use a gateway in a peered hub virtual network.
The hub virtual network peering must allow gateway transit ('Allow gateway transit'), and the spoke virtual network peering must explicitly configure the use of the remote gateway ('Use remote gateways').
Azure virtual network peering is directional and requires both sides of the link to opt-in for gateway sharing.
3
Identify the missing configuration.
The peering link from VNet-Spoke to VNet-Hub must have 'Use remote gateways' enabled.
Since 'Use remote gateways' is not currently enabled, the virtual machine in VNet-Spoke cannot route traffic through the gateway in VNet-Hub.

Key Concept

Virtual Network Gateway Transit in Peered Networks
Estimated Time:1m 30s
Rate this question

Topics

Configure Virtual Network Peering

More questions from this topic