AZ-800 - Microsoft Azure Networking Solutions Hybrid VPN Gateway Design Questions and Answers

Question 1

A company is designing a highly available hybrid network connection to Azure.
They require automatic failover for their Site-to-Site VPN connection.
Which Azure VPN Gateway configuration and routing protocol should be used to meet this requirement?

Accepted Answer

Active-active gateway with BGP

Answer

Active-standby gateway with static routing

Answer

Policy-based VPN gateway with static routing

Answer

Active-standby gateway with BGP

Question 2

You are configuring a hybrid VPN solution and need to ensure that routing updates from your on-premises network are automatically propagated to the Azure Virtual Network. Which of the following is a primary benefit of using BGP with an Azure VPN Gateway?

Accepted Answer

It enables automatic route exchange, removing the need for manual route table updates.

Answer

It encrypts traffic using a stronger algorithm than static routing.

Answer

It eliminates the need for a Local Network Gateway.

Answer

It is required for all Point-to-Site VPN connections.

Question 3

A network administrator is creating a new Azure VPN Gateway. They need to support dynamic routing and an active-active configuration. Which VPN Gateway SKU would NOT be suitable for this deployment?

Accepted Answer

Basic

Answer

VpnGw1

Answer

VpnGw2AZ

Answer

VpnGw3

Question 4

An organization plans to implement a dual-redundancy hybrid connection with two on-premises VPN devices connecting to an Azure VPN Gateway. To achieve the highest level of availability with fully meshed tunnels, what is the recommended Azure VPN Gateway configuration?

Accepted Answer

An active-active gateway with two local network gateways and two connections.

Answer

An active-standby gateway with two connections.

Answer

A policy-based gateway with BGP.

Answer

A single active-standby gateway with one local network gateway representing both on-premises devices.

Question 5

When configuring BGP on an Azure VPN Gateway for a hybrid connection, what is the purpose of the Autonomous System Number (ASN)?

Accepted Answer

To uniquely identify the network for BGP routing.

Answer

To identify the specific IPsec tunnel for routing.

Answer

To encrypt the BGP peering session.

Answer

To define the static routes for the connection.

Question 6

Which of the following is a key requirement when changing an existing active-standby Azure VPN Gateway to an active-active configuration?

Accepted Answer

A second public IP address must be assigned to the gateway.

Answer

The gateway must be a PolicyBased VPN type.

Answer

The gateway SKU must be downgraded to Basic.

Answer

BGP must be disabled before making the change.