WGU D084 - general study questions and answers rated A+
Question :
The Azure Virtual Machines are deployed on a virtual network. The hostname is defined for all the virtual machines. It is required to perform a DNS query to find the virtual machine as it resolves the hostname to IP. DNS queries should be internal to the virtual network. Which component should be used? ✔✔Azure Provided DNS
What is the correct CLI command to view DNS records?
A az dns record-set list --zone-name sampleref.com network
B az dns network record-set list --zone-name sampleref.com
C az record- dns network set list --zone-name sampleref.com
- / 4
D az network dns record-set list --zone-name sampleref.com ✔✔D az network dns record-set list --zone-name sampleref.com
Custom DNS settings can be configured at the VNet level, and the network interface level, but not at the ________ level. ✔✔subnet level.
To use specific settings for an individual subnet, you must configure those settings on each network interface in the subnet.
NSG Rule priority ranges ✔✔Priority values start from 100 and go to 4096 (and from 65001 to 65003 for default rules).
IRT NSGs what are service tags? ✔✔Service tags are used in NSG rules as a quick and reliable way of creating rules that control traffic to each service. Typically, they are used in outbound rules to control which other Azure services the VMs in a VNet can or cannot access.
what are the default NSG rules and their priorities? ✔✔Virtual network: Traffic originating and ending in a virtual network is allowed both in inbound and outbound directions. 2 / 4
Internet : Outbound traffic is allowed, but inbound traffic is blocked.
Load balancer: Allows Azure load balancer to probe the health of your VMs and role instances.If you are not using a load balanced set, you can override this rule.
Inbound:
AllowVNetInBound 65000 AllowAzureLoad BalancerInBound 65001 DenyAllInBound 65500
Outbound:
AllowVNet OutBound 65000 AllowInternet OutBound 65001 DenyAllOutBound 65500
caveat regarding the NSG Load Balancer security rule ✔✔The Load Balancer default rule uses the AzureLoadBalancer service tag. This applies only to Azure load balancer health probes, 3 / 4
which originate at the load balancer. It does not apply to traffic received through the load balancer, which retain their original source IP address and port.
What is an application security group (ASG) ✔✔Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups. You can reuse your security policy at scale without the manual maintenance of explicit IP addresses. The platform handles the complexity of explicit IP addresses and multiple rule sets, allowing you to focus on your business logic.
NSGs can be applied at the ASG level
When applying NSGs to Vritual Networks what does the destination IP range refer to? ✔✔The destination IP ranges refers to the VirtualNetwork. This allows the NSG to be applied to any subnet in any VNet, and avoids coupling the NSG to a specific IP range. Traffic will only be permitted to those subnets where the NSG is applied.
current rules regarding NSG associations, subnets, and VM NICs ✔✔NSGs can be associated with network interfaces (NICs) which are associated to the VMs, or they can be associated with a subnet. Each NIC or subnet can only be associated with a single NSG. However, a single NSG can be associated with multiple NICs and/or subnets.
- / 4