AZ-700 ExpressRoute and VPN Gateway Flashcards
6 cards from real AZ-700 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 AZ-700 ExpressRoute and VPN Gateway flashcards as text
Which VPN Gateway configuration is required to enable active-active mode?
Answer: A single gateway with two public IP addresses and BGP enabled
Active-active VPN Gateway mode requires the gateway to be configured with two public IP addresses and BGP must be enabled for both tunnel endpoints.
What is the default BGP Autonomous System Number (ASN) for Azure VPN Gateway?
Answer: 65515
Azure VPN Gateway uses ASN 65515 by default for BGP peering, though you can configure a custom private ASN during gateway creation.
Which VPN Gateway SKU naming convention indicates availability zone redundancy?
Answer: The SKU name ends in 'AZ' (e.g., VpnGw1AZ)
Zone-redundant VPN Gateway SKUs are identified by the 'AZ' suffix (e.g., VpnGw1AZ, VpnGw2AZ), deploying gateway instances across availability zones for higher resilience.
How many VNets can a Standard-tier ExpressRoute circuit be linked to by default?
Answer: 10
A Standard ExpressRoute circuit can be linked to up to 10 Azure virtual networks; upgrading to the Premium add-on increases this limit significantly.
What IKE versions does Azure VPN Gateway support for site-to-site connections?
Answer: Both IKEv1 and IKEv2
Azure VPN Gateway supports both IKEv1 and IKEv2 for site-to-site IPsec/IKE VPN tunnels, providing compatibility with a wide range of on-premises VPN devices.
Which point-to-site VPN authentication methods does Azure VPN Gateway support?
Answer: Certificate, Azure Active Directory, and RADIUS
Azure VPN Gateway point-to-site supports three authentication methods: native Azure certificate authentication, Azure Active Directory (for OpenVPN), and RADIUS for custom authentication servers.