Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 5 question 67 discussion

Actual exam question from Microsoft's AZ-303

Question #: 67
Topic #: 5

You have an Azure subscription that contains three virtual networks named VNet1, VNet2, and VNet3. VNet2 contains a virtual appliance named VM2 that operates as a router.
You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network.
You plan to configure peering between VNet1 and VNet2 and between VNet2 and VNet3.
You need to provide connectivity between VNet1 and VNet3 through VNet2.
Which two configurations should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. On the peering connections, allow forwarded traffic
B. Create a route filter
C. On the peering connections, allow gateway transit
D. Create route tables and assign the table to subnets
E. On the peering connections, use remote gateways

Show Suggested Answer

Suggested Answer: AD 🗳️

by snobrega at Jan. 3, 2021, 1:54 a.m.

Comments

Submit Cancel

snobrega

Highly Voted 4 years, 5 months ago

A. On the peering connections, allow forwarded traffic D. Create route tables and assign the table to subnets

upvoted 87 times

pentium75

3 years, 11 months ago

Yes because question is about connectivity 'between VNet1 and VNet3'. If it was about connectivity between VNet1/3 and rest of world, THEN it would be C+E.

upvoted 3 times

mingled

3 years, 10 months ago

Exactly this - this is in-between VNets only - therefore the correct answer is: A+D - If it was external connections from the outside world then C+E

upvoted 4 times

...

SyntaxError

Highly Voted 4 years, 5 months ago

A and D REF: https://www.examtopics.com/discussions/microsoft/view/6924-exam-az-300-topic-1-question-68-discussion/

upvoted 14 times

...

AD3

Most Recent 3 years, 4 months ago

A D For sure. We do have setup hub & spoke. In the terraform we have spoke2hub allow_forward_traffic true and same for hub2spoke peering. However, the use_remote_gateways is true only in spoke2hub but it's false in hub2spoke peering resources.

upvoted 1 times

...

Choquito

3 years, 4 months ago

C and E are the correct Answers, Since VNET2 has an appliance that acts as a router when adding the peering rauter will be detected and will allow to select gateway transit in fist VNET peer and Remote gateways on the second VNET

upvoted 1 times

...

ExameHero

3 years, 4 months ago

ExamTopics is the Best!!!

upvoted 1 times

...

Inland

3 years, 5 months ago

The given answer is correct. https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#spoke-connectivity You can also configure spokes to use the hub gateway to communicate with remote networks. To allow gateway traffic to flow from spoke to hub and connect to remote networks, you must: Configure the peering connection in the hub to allow gateway transit. Configure the peering connection in each spoke to use remote gateways. Configure all peering connections to allow forwarded traffic.

upvoted 1 times

...

SudhaRaj

3 years, 5 months ago

Selected Answer: AD

A. On the peering connections, allow forwarded traffic D. Create route tables and assign the table to subnets

upvoted 1 times

...

Eitant

3 years, 6 months ago

Selected Answer: AD

A. On the peering connections, allow forwarded traffic D. Create route tables and assign the table to subnets

upvoted 3 times

...

shafqat

3 years, 8 months ago

For sure A and D, there is no Gateway involved here as connectivity is between spokes.

upvoted 1 times

...

syu31svc

3 years, 9 months ago

https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?toc=%2Fazure%2Fvirtual-network%2Ftoc.json&tabs=cli Configure all peering connections to allow forwarded traffic This would make A as one of the answers Between route filter and route table, route table is the obvious choice D is the other answer

upvoted 3 times

...

Pinto

3 years, 10 months ago

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

upvoted 2 times

...

guptavishal7982

4 years ago

AC. Not E as there is no VPN Gateway connectivity required. Not D and B as configuration is only needed on VNET2. https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#virtual-network-peering

upvoted 1 times

guptavishal7982

4 years ago

I rechecked and tested in lab. Correct answer is A&D. C is not possible without E.

upvoted 3 times

...

ashishg2105

4 years ago

This question came in AZ104 and I Have passed last week. Answer is A and D.

upvoted 3 times

...

qerem

4 years ago

A,D If you require connectivity between spokes, consider deploying an Azure Firewall or other network virtual appliance and create routes to forward traffic from the spoke to the firewall / network virtual appliance, which can then route to the second spoke. In this scenario, you must configure the peering connections to allow forwarded traffic.

upvoted 2 times

...

oug

4 years, 1 month ago

Check the “Allow gateway transit” option on the peering connections from the hub & check the “Use remote gateways” option on the peering connections from the spokes to the hub, to allow the traffic flow through the gateway in the hub.

upvoted 2 times

...

AgentHunt

4 years, 1 month ago

The requirement is not of a Hybrid Network, rather of a transit VNet. Ans C & E are correct. https://azure.microsoft.com/en-us/blog/create-a-transit-vnet-using-vnet-peering/

upvoted 1 times

...

sqlbuddy123

4 years, 3 months ago

AD .. Check vnet peering .. https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli

upvoted 1 times

...

Load full discussion...