Overview -
Litware, Inc. is a financial company that has a main datacenter in Boston and 20 branch offices across the United States. Users have Android, iOS, and Windows 10 devices.
Existing Environment -
Hybrid Environment -
The on-premises network contains an Active Directory forest named litwareinc.com that syncs to an Azure Active Directory (Azure AD) tenant named litwareinc.com by using Azure AD Connect.
All offices connect to a virtual network named Vnet1 by using a Site-to-Site VPN connection.
Azure Environment -
Litware has an Azure subscription named Sub1 that is linked to the litwareinc.com Azure AD tenant. Sub1 contains resources in the East US Azure region as shown in the following table.
 
A diagram of the resource in the East US Azure region is shown in the Azure Network Diagram exhibit.
There is bidirectional peering between Vnet1 and Vnet2. There is bidirectional peering between Vnet1 and Vnet3. Currently, Vnet2 and Vnet3 cannot communicate directly.
Azure Network Diagram -
 
Requirements -
Business Requirements -
Litware wants to minimize costs whenever possible, as long as all other requirements are met.
Virtual Networking Requirements -
Litware identifies the following virtual networking requirements:
•	Direct the default route of 0.0.0.0/0 on Vnet2 and Vnet3 to the Boston datacenter over an ExpressRoute circuit.
•	Ensure that the records in the cloud.litwareinc.com can be resolved from the on-premises locations.
•	Automatically register the DNS names of Azure virtual machines to the cloud.litwareinc.com zone.
•	Minimize the size of the subnets allocated to platform-managed services.
•	Allow traffic from VMScaleSet1 to VMScaleSet2 on the TCP port 443 only.
Hybrid Networking Requirements -
Litware identifies the following hybrid networking requirements:
•	Users must be able to connect to Vnet1 by using a Point-to-Site (P2S) VPN when working remotely. Connections must be authenticated by Azure AD.
•	Latency of the traffic between the Boston datacenter and all the virtual networks must be minimized.
•	The Boston datacenter must connect to the Azure virtual networks by using an ExpressRoute FastPath connection.
•	Traffic between Vnet2 and Vnet3 must be routed through Vnet1.
PaaS Networking Requirements -
Litware identifies the following networking requirements for platform as a service (PaaS):
•	The storage1 account must be accessible from all on-premises locations without exposing the public endpoint of storage1.
•	The storage2 account must be accessible from Vnet2 and Vnet3 without exposing the public endpoint of storage2.
You need to connect Vnet2 and Vnet3. The solution must meet the virtual networking requirements and the business requirements.
Which two actions should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. On the peering from Vnet1, select Allow for Traffic forwarded from remote virtual network.

B. On the peerings from Vnet2 and Vnet3, select Allow for Traffic forwarded from remote virtual network.

C. On the peering from Vnet1, select Use the remote virtual network's gateway or Route Server.

D. On the peering from Vnet1, select Allow for Traffic to remote virtual network.

E. On the peerings from Vnet2 and Vnet3, select Use the remote virtual network's gateway or Route Server.






 

Suggested Answer: AE



This question is in AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
For getting Microsoft Certified: Azure Network Engineer Associate Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.