Microsoft

AZ-800 practice question 127

Administering Windows Server Hybrid Core Infrastructure · free question 127 of 246

Question

You have an Azure subscription that contains a virtual network named VNet1. Vnet1 contains three subnets named Subnet1, Subnet2, and Subnet3. You deploy a virtual machine that has the following settings: • Name:VM1 • Subnet: Subnet2 • Network interface name: NIC1 • Operating system: Windows Server 2022 You need to ensure that VM1 can route traffic between Subnet1 and Subnet3. The solution must minimize administrative effort. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation

From the Azure portal: Enable IP forwarding for NIC1. — By default the Azure software-defined network drops any packet arriving at a NIC whose destination IP does not match one of that NIC's own IP configurations, so VM1 could never pass traffic on behalf of Subnet1 and Subnet3; enabling IP forwarding on NIC1 tells the Azure host to allow VM1 to send and receive packets addressed to other IPs, which is the prerequisite for any NVA-style routing VM. Associating a route table with Subnet2 is not the answer here, because a user-defined route on Subnet2 controls where traffic leaving Subnet2 goes rather than granting VM1 the right to forward transit traffic, and attaching two more interfaces is unnecessary since a single NIC in Subnet2 can route between the other subnets over the VNet's built-in system routes. On VM1: Run the route add command. — Inside the guest, Windows Server 2022 needs routing entries pointing to the Subnet2 default gateway (the .1 address of the subnet) for the Subnet1 and Subnet3 prefixes, and `route add -p` (or the equivalent New-NetRoute) creates those persistent entries with a single command and no role installation. Installing and configuring Routing and Remote Access would add a server role, RRAS configuration, and ongoing management for a result the routing table already provides, so it does not minimize administrative effort, and Network Controller is the SDN management role for on-premises Hyper-V fabrics, not a router for an Azure VM.

Need the theory? Learn it free in the AZ-800 course on Godlike Academy

Practice the whole free set

AZ-800 is a free exam: all 300 questions with instant feedback, plus Learn and Exam modes and PDF export, free.