Question 450 An application uses separate VNets in different Azure regions and requires private VNet-to-VNet connectivity. Which mechanism is specifically designed for this? An availability set spanning both regions Create route-table entries without the required network connection or peering A single subnet deployed in both regions Global virtual network peering where supported Explanation Correct Answer D:Global peering connects eligible VNets across Azure regions. Incorrect Answers A:Availability sets are not region-spanning VNet connections. B:Routes alone do not establish cross-region VNet peering connectivity between unconnected virtual networks. C:Subnets belong to regional VNets.
Question 451 VNet A is peered with B and B is peered with C; A has no direct peering to C. Which assumption must the architect avoid? Assume that because the names resolve, VNet A automatically transits VNet B to VNet C Every Azure VNet has a private address range Subnets belong to VNets Peering is not automatically transitive through B Explanation Correct Answer D:Additional direct peering or routing design is needed for A-to-C connectivity. Incorrect Answers A:DNS resolution does not make VNet peering transitive; routing and connectivity must be designed explicitly. B:That is normal VNet behavior. C:The hierarchy remains valid.
Question 452 Two teams attempt to peer VNets with overlapping private CIDR blocks. What is the key design issue? Increasing VM CPU size repairs address conflicts Overlapping ranges block straightforward VNet peering and must be resolved The peering connection just needs a longer name Moving the VNets into one subscription eliminates duplicate IP routing Explanation Correct Answer B:Peering requires unambiguous network address spaces. Incorrect Answers A:Compute performance doesn't resolve IP overlap. C:Display names don't resolve route overlap. D:Subscription membership doesn't change CIDRs.
Question 453 Two separately administered subscriptions use peering for VNet connectivity. What prerequisite is still necessary? Giving both VNets identical names Moving both subscriptions into one resource group Giving every end user Global Administrator Authorized network permissions on the VNets to establish peering Explanation Correct Answer D:Cross-subscription peering requires appropriate access and network configuration. Incorrect Answers A:Names aren't the cross-subscription authorization mechanism. B:Resource groups are scoped within subscriptions and cannot contain whole subscriptions. C:Unrestricted identity privileges are neither necessary nor appropriate.
Question 454 Two VNets are peered, and a database still refuses TCP connections. What should operators check besides peering status? Whether the subscription has the same invoice format Whether a SQL warehouse exists elsewhere NSGs, host firewalls and required routing or service listeners Whether both VNets use one resource tag Explanation Correct Answer C:Peering provides a path but security rules and application endpoints still matter. Incorrect Answers A:Billing format doesn't pass TCP traffic. B:An unrelated warehouse doesn't open VM database ports. D:Tags don't authorize network ports.
Question 455 A design replaces a public IP-based connection between two Azure VNets with private peering. Which commercial consideration should it still investigate? Whether every VM is in an availability set Applicable peering data-transfer charges for traffic and region pairs Estimate peering charges only from the number of virtual network names Only the length of the VNet name Explanation Correct Answer B:Private connectivity isn't necessarily free; transfer pricing depends on scope. Incorrect Answers A:VM placement isn't the network transfer meter. C:Peering economics depend on relevant traffic transfers and pricing rules, not only the names or quantity of records. D:Display names do not bill inter-VNet traffic.
Question 456 A business wants Azure to host the authoritative DNS records for its purchased public domain. Which service is suitable? Azure Backup Azure VNet peering An Azure VM availability set Azure DNS public zones Explanation Correct Answer D:Azure DNS can host and answer queries for a delegated public DNS namespace. Incorrect Answers A:Backup recovery doesn't host domain records. B:Peering moves packets between VNets, not public DNS authoritative records. C:Placement groups do not provide public domain zone hosting.
Question 457 A team creates an Azure DNS public zone for example.com, but internet resolvers still use its old name servers. What configuration is missing? Create an availability set for DNS Delegate the domain to the Azure DNS zone name servers at its registrar Move the zone to a new resource group every hour Increase the VM disk size for the site Explanation Correct Answer B:Public resolvers follow domain delegation to find the authoritative zone. Incorrect Answers A:Fault placement of VMs isn't public DNS registrar delegation. C:Grouping does not change delegation. D:Disk capacity doesn't update registrar NS records.
Question 458 Internal VMs should resolve database.internal.example using names visible only within connected Azure networks. Which Azure capability fits? An Azure Data Box device Azure Private DNS zone linked to the appropriate VNets An Azure subscription cost budget Publish internal service records in a public Azure DNS zone as though they were private Explanation Correct Answer B:Private zones provide private name resolution for linked networks. Incorrect Answers A:Offline shipment cannot provide runtime DNS. C:Budgets do not resolve names. D:Public DNS is not a private VNet-linked namespace for internal endpoints and should not expose confidential details.
Question 459 A site changes an A record but some clients still reach the old address shortly afterward. Which DNS behavior can explain this? Every Azure VM automatically ignores DNS TTL Azure Policy immediately changes all cached responses globally VNet peering replaces DNS caching Resolvers can cache the old record until its TTL expires Explanation Correct Answer D:DNS caching may delay adoption of record changes. Incorrect Answers A:Clients can cache name answers. B:Governance cannot flush every external resolver. C:Peering doesn't control external DNS cache expiration.
Question 460 A team wants a public hostname to resolve directly to an IPv4 address. Which DNS record type ordinarily represents that mapping? An A record An MX record An SRV record A TXT record Explanation Correct Answer A:A records map DNS names to IPv4 addresses. Incorrect Answers B:MX identifies mail exchange hosts, not the basic address mapping. C:SRV locates services by protocol and port, not a basic A mapping. D:TXT stores arbitrary text, not the ordinary hostname-to-IPv4 mapping.
