AZ-700 VPN Gateway 2

Question 1

Which protocol must be used for Point-to-Site VPN when Azure AD authentication is selected?

Accepted Answer

OpenVPN

Answer

SSTP

Answer

IKEv2

Answer

L2TP/IPsec

Question 2

What is the function of BGP in Azure VPN Gateway?

Accepted Answer

Dynamically exchanges routes between Azure and on-premises networks

Answer

Encrypts VPN tunnel traffic

Answer

Provides DDoS protection for the gateway

Answer

Balances traffic across multiple tunnels

Question 3

In an active-active VPN Gateway configuration, what is created to ensure high availability?

Accepted Answer

Two gateway instances each with their own public IP and BGP peer

Answer

Two separate VPN gateways in different regions

Answer

One active and one standby instance sharing a single IP

Answer

Two Local Network Gateways

Question 4

Which IKE version does Azure VPN Gateway use by default for Route-based VPN connections?

Accepted Answer

IKEv2

Answer

IKEv1

Answer

IKEv3

Answer

Both IKEv1 and IKEv2 equally

Question 5

What Azure resource must be provisioned in the GatewaySubnet before deploying a VPN Gateway?

Accepted Answer

A public IP address resource

Answer

Nothing — the gateway deploys directly into GatewaySubnet

Answer

A Network Security Group

Answer

A route table with default routes

Question 6

What is the recommended GatewaySubnet CIDR size for a production VPN Gateway deployment to support future scaling?

Accepted Answer

/27 or larger

Answer

/32

Answer

/30

Answer

/24