AZ-700 AZ-700 ExpressRoute and VPN Gateway 1 — Questions and Answers
Question 1: How does ExpressRoute differ from a site-to-site VPN?
- ExpressRoute uses IPsec encryption over the public internet
- ExpressRoute provides a private dedicated circuit that bypasses the public internet (Correct answer)
- ExpressRoute only supports BGP while VPN supports static routes
- ExpressRoute connects only to Azure Storage, not virtual networks
Correct answer: ExpressRoute provides a private dedicated circuit that bypasses the public internet
ExpressRoute provides a private, dedicated network connection to Azure through a connectivity provider, bypassing the public internet entirely unlike VPN which tunnels over the internet.
Question 2: What routing protocol does ExpressRoute use to exchange routes with Azure?
- OSPF
- RIP
- BGP (Border Gateway Protocol) (Correct answer)
- EIGRP
Correct answer: BGP (Border Gateway Protocol)
ExpressRoute exclusively uses BGP (Border Gateway Protocol) for dynamic route exchange between your on-premises network and Azure.
Question 3: What is ExpressRoute Global Reach used for?
- Increasing the bandwidth of an ExpressRoute circuit
- Connecting two on-premises networks to each other through the Microsoft backbone (Correct answer)
- Enabling IPv6 on an ExpressRoute circuit
- Linking an ExpressRoute circuit to multiple Azure regions
Correct answer: Connecting two on-premises networks to each other through the Microsoft backbone
ExpressRoute Global Reach allows two on-premises networks, each connected to Azure via ExpressRoute, to communicate with each other through the Microsoft global network.
Question 4: Which ExpressRoute peering type is used to connect to Azure virtual networks?
- Microsoft peering
- Public peering
- Private peering (Correct answer)
- Internal peering
Correct answer: Private peering
ExpressRoute private peering connects your on-premises network to Azure virtual networks (VNets) over a private, dedicated path.
Question 5: What is the minimum circuit bandwidth available for an ExpressRoute circuit?
- 1 Gbps
- 100 Mbps
- 50 Mbps (Correct answer)
- 10 Mbps
Correct answer: 50 Mbps
ExpressRoute circuits are available starting at 50 Mbps, scaling up to 10 Gbps for provider-based circuits and up to 100 Gbps for ExpressRoute Direct.
Question 6: What is the naming requirement for the subnet used by an Azure VPN Gateway?
- It must be named 'vpn-subnet'
- It must be named 'GatewaySubnet' (Correct answer)
- It must be named 'AzureGatewaySubnet'
- It can be any name as long as it is /27 or larger
Correct answer: It must be named 'GatewaySubnet'
Azure requires the gateway subnet to be named exactly 'GatewaySubnet'; any other name will cause deployment to fail.
AZ-700 AZ-700 ExpressRoute and VPN Gateway 1
How does ExpressRoute differ from a site-to-site VPN?