CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding Azure VNet Internet Connectivity for AZ-104
Explore a common AZ-104 exam question on Azure VNet internet connectivity and understand the reasoning behind the correct answer.
Setting up Azure VNets can trip candidates, especially when it comes to ensuring internet connectivity. Knowing the right configuration is key to passing the AZ-104 exam.
The question
You are setting up a new Azure VNet and need to ensure that it can connect to the internet. Which of the following configurations is required?
- A. A public IP address assigned to the VNet.
- B. An Azure VPN Gateway configured for point-to-site.
- C. A default route in the route table of the subnet.
- D. A Network Security Group allowing outbound internet traffic.
Think before you scroll
Before choosing an answer, consider how Azure VNets connect to the internet. Remember that routing plays a crucial role in directing traffic appropriately.
The answer
The correct option is C: A default route in the route table of the subnet. A default route (0.0.0.0/0) is necessary for directing traffic from the VNet to the internet. Without this route, the VNet cannot send requests out to the internet.
Why the other options lose
- A. A public IP address assigned to the VNet. While a public IP address is important for accessing external resources, it does not guarantee internet connectivity. The VNet needs a route directing traffic to the internet.
- B. An Azure VPN Gateway configured for point-to-site. This option relates to secure connections for remote users but does not facilitate general internet access for the VNet. A default route is still required for outbound traffic.
- D. A Network Security Group allowing outbound internet traffic. NSGs are crucial for controlling access and security, but they alone do not establish a path for internet traffic. The absence of a default route means traffic cannot leave the VNet.
The concept behind it
The principle here is understanding routing in Azure VNets. To enable internet access, a default route in the subnet's route table is essential. This directs traffic to 0.0.0.0/0, allowing the VNet to communicate with external networks.
Exam trap to remember
Remember this: Without a default route, your VNet remains isolated from the internet, regardless of other configurations. Always check routing as a priority when setting up VNets.