Examkin

Question

Difficulty: MediumConfigure Azure Load Balancer

You are planning to configure a public Azure Load Balancer to distribute internet traffic to two Azure virtual machines named VM1 and VM2. VM1 is deployed in Availability Zone 1, and VM2 is deployed in Availability Zone 2.

You decide to deploy a Standard Load Balancer.

Which two configurations must you perform to successfully deploy the load balancer and allow traffic to the virtual machines? (Select two)

  1. Create a Standard SKU public IP address for the frontend IP configuration.Answer
  2. Associate a Network Security Group (NSG) with the subnets or network interfaces of VM1 and VM2 and allow the inbound traffic.Answer
  3. C
    Create a Basic SKU public IP address for the frontend IP configuration.
  4. D
    Configure the public IP address for the frontend IP configuration to use dynamic allocation.

Answer

To successfully deploy a Standard Load Balancer and allow traffic to the zonal virtual machines, you must create a Standard SKU public IP address for the frontend IP configuration and associate a Network Security Group (NSG) with the subnets or network interfaces of VM1 and VM2 with rules to allow inbound traffic.
The correct configurations require selecting a Standard SKU public IP address and associating a Network Security Group (NSG) to allow inbound traffic. Standard Load Balancer frontend configurations must match the Standard SKU. In addition, Standard Load Balancers are secure by default, meaning that traffic to the backend pool is blocked until explicitly allowed via NSG rules.

Step-by-Step Solution

1
Select the correct Public IP SKU.
Create a Standard SKU public IP address.
Standard Load Balancers require a Standard SKU public IP address for their frontend configuration. Basic SKU public IPs cannot be used.
2
Ensure the Public IP allocation method is compatible.
Configure static allocation for the public IP.
Standard SKU public IP addresses support only static allocation, not dynamic allocation.
3
Configure backend security access.
Associate an NSG with the VMs and add inbound rules to allow traffic.
Standard Load Balancers are secure by default. Unlike Basic Load Balancers which allow all traffic, Standard Load Balancers block all traffic to backend pool members unless explicitly permitted by a Network Security Group.

Key Concept

Azure Load Balancer SKU selection and configuration requirements
Rate this question

Topics

Configure Azure Load Balancer

More questions from this topic