az-104 Practice Question 1723
Exam: az-104
Domain: Deploy and manage Azure compute resources
Topic: Automate deployment of resources by using templates
Difficulty: medium
An organization is planning to deploy a hybrid environment with Azure Virtual Machines and on-premises servers. They want to ensure secure communication between these resources using Azure Virtual Network Peering. How should the ARM template be configured to establish peering between the Azure VNet and the on-premises network, and what additional steps are required to enable traffic flow between them?
Answer Options
A
Configure VNet peering from the Azure VNet to the on-premises network only.
B
Set up VNet peering in both directions and configure firewall rules and routing on both sides.
C
Use a single VNet peering configuration without considering the on-premises network.
D
Deploy a custom script extension on the Azure VMs to enable communication with the on-premises network.
Correct Answer
B: Set up VNet peering in both directions and configure firewall rules and routing on both sides.
Explanation
The correct answer is B. To establish peering between the Azure VNet and the on-premises network, you need to configure the peerings in both directions. Additionally, you must set up the appropriate firewall rules and routing configurations to allow traffic flow between the networks. Option A is incorrect because it suggests configuring only one direction of peering, which is insufficient for a two-way communication setup. Option C is incorrect because it implies using a single VNet peering without considering the on-premises network, which is not comprehensive enough. Option D is incorrect because it suggests using a custom script extension, which is not relevant to setting up VNet peering.