Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 5 question 60 discussion

Actual exam question from Microsoft's AZ-303

Question #: 60
Topic #: 5

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

When you are finished performing all the tasks, click the `˜Next' button.
Note that you cannot return to the lab once you click the `˜Next' button. Scoring occur in the background while you complete the rest of the exam.

Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

To start the lab -
You may start the lab by clicking the Next button.
You plan to create 100 Azure virtual machines on each of the following three virtual networks:
- VNET1005a
- VNET1005b
- VNET1005c
All the network traffic between the three virtual networks will be routed through VNET1005a.
You need to create the virtual networks, and then to ensure that all the Azure virtual machines can connect to other virtual machines by using their private IP address. The solutions must NOT require any virtual gateways and must minimize the number of peerings.
What should you do from the Azure portal before you configure IP routing?

Show Suggested Answer

Suggested Answer: See solution below.
Step 1: Click Create a resource in the portal.
Step 2: Enter Virtual network in the Search the Marketplace box at the top of the New pane that appears. Click Virtual network when it appears in the search results.
Step 3: Select Classic in the Select a deployment model box in the Virtual Network pane that appears, then click Create.
Step 4: Enter the following values on the Create virtual network (classic) pane and then click Create:

Name: VNET1005a -

Address space: 10.0.0.0/16 -

Subnet name: subnet0 -

Resource group: Create new -
Subnet address range: 10.0.0.0/24
Subscription and location: Select your subscription and location.
Step 5: Repeat steps 3-5 for VNET1005b (10.1.0.0/16, 10.1.0.0/24), and for VNET1005c 10.2.0.0/16, 10.2.0.0/24).
References:
https://docs.microsoft.com/en-us/azure/virtual-network/create-virtual-network-classic

by MichaelCWWong at Jan. 3, 2021, 9:39 a.m.

Comments

Submit Cancel

Stevezzc

Highly Voted 4 years, 5 months ago

create Vnet peering of Vnet1005b<->Vnet1005a<->Vnet1005c and enable ip forwarding on the peering object. https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#create-a-peering

upvoted 23 times

...

Stephan99

Highly Voted 4 years, 3 months ago

Create your 3 subnets vnetA, vnetB and vnetC From vnetA, create a peering with VNETb using the Resource Manager Deployment Model Ensure "Allow forwarded traffic from vnetA to vnetB" is enabled Repeat steps 2 & 3, substituting vnetB for vnetC

upvoted 12 times

...

donathon

Most Recent 3 years, 6 months ago

Need 3 thing. 1. select Resource Manager as the deployment model. 2. Select allow traffic to remote virtual network. 3. Allow Traffic forwarded from remote virtual network.

upvoted 1 times

...

poplovic

3 years, 7 months ago

(1) VNET peering b<->a<->c (2) configure the peering connections to allow forwarded traffic. (3) not in the scope: configure the VNA and route https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#spoke-connectivity Spoke connectivity If you require connectivity between spokes, consider deploying an Azure Firewall or other network virtual appliance. Then create routes to forward traffic from the spoke to the firewall or network virtual appliance, which can then route to the second spoke. In this scenario, you must configure the peering connections to allow forwarded traffic.

upvoted 3 times

...

nguyenhung1121990

4 years, 1 month ago

anyone is able to enable IP forwarding on the peering? I've never try it and did not find the object like this.

upvoted 2 times

J4U

3 years, 9 months ago

IP Forwarding is available on the NIC. So a virtual appliance is required to configure it.

upvoted 1 times

...

DNeo

4 years, 2 months ago

before you start with vnet peering, you'd need the address range and subnets in each of them...that's the answer here.

upvoted 1 times

...

robotcop

4 years, 4 months ago

Not possible without virtual network appliance if want to enable IP forwarding. look for this discussion https://www.examtopics.com/discussions/microsoft/view/5605-exam-az-300-topic-1-question-61-discussion/

upvoted 4 times

Aghora

4 years, 4 months ago

the questions asks for steps "BEFORE YOU CONFIGER IP ROUTING". 2 peering's with IP forwarding is good for this .

upvoted 1 times

pentium75

3 years, 10 months ago

:O The question does not say that.

upvoted 2 times

...

G_Z

4 years, 4 months ago

Do not select Virtual networks (classic) if it appears in the list, as you cannot create a peering from a virtual network deployed through the classic deployment model. the instruction uses classic mode is not correct.

upvoted 3 times

...

MichaelCWWong

4 years, 5 months ago

The answer is missing the steps of creating Vnet peering of Vnet1005b<->Vnet1005a<->Vnet1005c with IP forwarding enabled

upvoted 3 times

...