AZ-700 VPN Gateway 2

Question 1

Which protocol must be used for Point-to-Site VPN when Azure AD authentication is selected?

Accepted Answer

OpenVPN

Answer

Azure AD authentication for P2S VPN is only supported with the OpenVPN protocol.

Question 2

What is the function of BGP in Azure VPN Gateway?

Accepted Answer

Dynamically exchanges routes between Azure and on-premises networks

Answer

BGP enables dynamic route exchange between Azure VPN Gateway and on-premises BGP-capable devices, removing the need for static route management.

Question 3

In an active-active VPN Gateway configuration, what is created to ensure high availability?

Accepted Answer

Two gateway instances each with their own public IP and BGP peer

Answer

Active-active mode deploys two gateway instances, each with its own public IP, establishing dual tunnels for redundancy.

Question 4

Which IKE version does Azure VPN Gateway use by default for Route-based VPN connections?

Accepted Answer

IKEv2

Answer

Azure VPN Gateway defaults to IKEv2 for route-based VPN connections, though IKEv1 is supported for policy-based connections.

Question 5

What Azure resource must be provisioned in the GatewaySubnet before deploying a VPN Gateway?

Accepted Answer

A public IP address resource

Answer

A Public IP address resource must be created and associated with the VPN Gateway before deployment.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test