AZ-700 VPN Gateway 3

Question 1

Which VPN Gateway feature lets you define specific traffic selectors instead of routing all traffic through the tunnel?

Accepted Answer

Traffic selector policies on route-based VPN

Answer

Traffic selector policies on route-based VPN gateways allow you to specify which traffic flows are protected by the IPsec tunnel.

Question 2

What does 'forced tunneling' accomplish in an Azure VPN configuration?

Accepted Answer

Forces all internet-bound traffic from Azure VMs through the on-premises network

Answer

Forced tunneling redirects all internet-bound traffic from Azure VMs back through the VPN tunnel to on-premises for inspection or compliance.

Question 3

Which Azure VPN Gateway SKU is NOT supported for production workloads and should only be used for dev/test?

Accepted Answer

Basic

Answer

The Basic SKU is a legacy gateway intended for dev/test scenarios and does not support many production features like BGP or active-active.

Question 4

What is the ASN Azure VPN Gateway uses by default for BGP if you do not specify a custom ASN?

Accepted Answer

65515

Answer

Azure VPN Gateway uses ASN 65515 as the default BGP ASN unless a custom private ASN is configured.

Question 5

Which connection type between two Azure VNets does NOT require a VPN Gateway?

Accepted Answer

VNet peering

Answer

VNet peering connects two VNets directly over the Azure backbone without any gateway, making it lower latency and simpler.

AZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test