Question

Difficulty: MediumConfigure Virtual Network Peering

An administrator is configuring virtual network peering to establish connectivity across three Azure virtual networks in the same region:
* VNet-App (address space 10.150.0.0/1610.150.0.0/16) containing a virtual machine named VM-App.
* VNet-Hub (address space 10.160.0.0/1610.160.0.0/16) containing a virtual machine named VM-Hub.
* VNet-DB (address space 10.170.0.0/1610.170.0.0/16) containing a virtual machine named VM-DB.

The administrator configures a virtual network peering between VNet-App and VNet-Hub, and another peering between VNet-Hub and VNet-DB. No user-defined routes (UDRs) or virtual network gateways are deployed.

Statement: VM-App can successfully establish a direct connection to VM-DB over the peered networks.

Is this statement true or false?

Answer: Answer

Answer

False
The correct answer is False because virtual network peering is non-transitive by default. Spoke virtual networks cannot communicate with each other through a hub virtual network unless a routing appliance is introduced or a direct peering link is configured between the spokes.

Step-by-Step Solution

1
Analyze the peering topology.
VNet-App is peered with VNet-Hub, and VNet-Hub is peered with VNet-DB. No direct peering link exists between VNet-App and VNet-DB.
Understanding the layout of virtual network peerings is necessary to evaluate the default path routing behavior.
2
Evaluate the transit behavior of default Azure virtual network peering.
Virtual network peering is non-transitive, meaning VNet-Hub will not automatically forward packets between VNet-App and VNet-DB.
This is a core constraint of Azure virtual networking designed to prevent unauthorized transit routing.
3
Determine the connection status between VM-App and VM-DB.
Because peering is non-transitive and no gateway or NVA routing is configured, VM-App cannot establish a direct connection to VM-DB.
Evaluating final connectivity under the default configuration yields the answer.

Key Concept

Transitive routing limitations in Virtual Network Peering
Rate this question