Examkin

Soru

Zorluk: Çok zorConfigure Virtual Network Peering

Your company has an Azure environment with three virtual networks in the East US region:

* VNet-Hub (10.10.0.0/1610.10.0.0/16) contains a Virtual Network Gateway configured for ExpressRoute. A virtual machine named VM-Hub is deployed in a subnet within VNet-Hub.
* VNet-SpokeA (10.20.0.0/1610.20.0.0/16) contains a virtual machine named VM-SpokeA deployed in a subnet within VNet-SpokeA.
* VNet-SpokeB (10.30.0.0/1610.30.0.0/16) contains a virtual machine named VM-SpokeB deployed in a subnet within VNet-SpokeB.

You configure virtual network peering between VNet-Hub and VNet-SpokeA, and between VNet-Hub and VNet-SpokeB.

You have the following requirements:
1. VM-SpokeA must be able to communicate with on-premises resources via the ExpressRoute gateway in VNet-Hub.
2. VM-SpokeB must NOT be able to communicate with on-premises resources, but must still communicate directly with VM-Hub.

Which two configurations should you perform to meet these requirements? (Select two.)

  1. In the virtual network peering configuration from VNet-SpokeA to VNet-Hub, select Use the remote virtual network's gateway or Route Server.Cevap
  2. In the virtual network peering configuration from VNet-Hub to VNet-SpokeA, select Use this virtual network's gateway or Route Server.Cevap
  3. C
    In the virtual network peering configuration from VNet-SpokeB to VNet-Hub, select Use the remote virtual network's gateway or Route Server.
  4. D
    In the virtual network peering configuration from VNet-Hub to VNet-SpokeB, select Use this virtual network's gateway or Route Server.

Cevap

To configure gateway transit selectively, you must enable 'Use this virtual network's gateway or Route Server' on the peering link from VNet-Hub to VNet-SpokeA, and enable 'Use the remote virtual network's gateway or Route Server' on the peering link from VNet-SpokeA to VNet-Hub. You must not enable these gateway settings on the peering configurations between VNet-Hub and VNet-SpokeB.
To satisfy the requirements, gateway transit must be configured specifically for the peering between the hub VNet (VNet-Hub) and the authorized spoke VNet (VNet-SpokeA). This is achieved by enabling 'Use this virtual network's gateway or Route Server' on the peering link from the hub to the spoke, and enabling 'Use the remote virtual network's gateway or Route Server' on the peering link from the spoke to the hub. Since VNet-SpokeB must not access on-premises networks, gateway transit settings must not be enabled on the peering links between VNet-Hub and VNet-SpokeB, keeping the gateway isolated from VNet-SpokeB while maintaining VNet peering connectivity.

Adım Adım Çözüm

1
Enable gateway transit on the hub side of the peering link with VNet-SpokeA.
The peering link from VNet-Hub to VNet-SpokeA is configured with 'Use this virtual network's gateway or Route Server' enabled.
This configuration allows the Virtual Network Gateway in VNet-Hub to be shared with VNet-SpokeA.
2
Configure the spoke side of the peering link to use the remote gateway in VNet-Hub.
The peering link from VNet-SpokeA to VNet-Hub is configured with 'Use the remote virtual network's gateway or Route Server' enabled.
This configuration directs traffic from VNet-SpokeA destined for on-premises to route through the gateway in VNet-Hub.
3
Verify gateway transit settings are disabled on the peering link between VNet-Hub and VNet-SpokeB.
The peering links between VNet-Hub and VNet-SpokeB remain peering-active but have 'Use this virtual network's gateway or Route Server' and 'Use the remote virtual network's gateway or Route Server' disabled.
This configuration prevents VM-SpokeB from using the virtual network gateway in VNet-Hub to reach on-premises networks while preserving direct peering communication between VM-Hub and VM-SpokeB.

Anahtar Kavram

Gateway transit in virtual network peering allows peered virtual networks to share a virtual network gateway or Route Server, which can be selectively configured per peering link to control which spokes have transit connectivity to on-premises networks.
Tahmini Süre:3m 0s
Bu soruyu puanla

Konular

Configure Virtual Network Peering

Bu konudan daha fazla soru