AZ-800 Hybrid VPN Gateway Design 2

Question 1

Your organization needs a VPN gateway that supports active-active configuration for high availability. Which Azure VPN Gateway SKU is the MINIMUM required to enable active-active mode?

Accepted Answer

VpnGw1

Answer

Active-active mode requires VpnGw1 or higher; the Basic and Standard SKUs do not support this configuration.

Question 2

A company needs to connect 50 branch offices to Azure using a hub-and-spoke topology. Which VPN solution best minimizes management overhead for this scale?

Accepted Answer

Azure Virtual WAN with VPN sites

Answer

Azure Virtual WAN automates branch connectivity at scale using VPN sites, reducing per-branch management overhead significantly.

Question 3

When configuring a policy-based VPN gateway in Azure, which statement accurately describes its traffic selector behavior?

Accepted Answer

It uses static routing and creates a single tunnel with specific traffic selectors

Answer

Policy-based VPN gateways use static routing and define traffic selectors per tunnel, supporting only a single tunnel per connection.

Question 4

You need to configure a VPN gateway with a 99.99% SLA. What configuration is required?

Accepted Answer

Zone-redundant gateway across availability zones

Answer

Zone-redundant VPN gateways deployed across Azure Availability Zones provide the 99.99% SLA guarantee.

Question 5

A network engineer must allow on-premises clients to connect to Azure over point-to-site VPN using Azure Active Directory authentication. Which tunnel protocol is required?

Accepted Answer

OpenVPN

Answer

Azure AD authentication for P2S VPN is only supported with the OpenVPN (SSL/TLS) tunnel protocol.

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 - Microsoft Azure Networking Solutions Practice Test

AZ-800 Hybrid VPN Gateway Design 2