AZ-800 Hybrid VPN Gateway Design 5

Question 1

A multi-national company wants to connect Azure regions across the globe using the Microsoft backbone network with VPN. Which service should they use?

Accepted Answer

Azure Virtual WAN with global transit routing

Answer

Global VNet Peering with VPN gateways

Answer

Multiple ExpressRoute circuits with Global Reach

Answer

Site-to-site VPN between regional hubs

Question 2

You configure a VPN gateway connection and set the DPD (Dead Peer Detection) timeout. What happens when the DPD timeout expires without a response from the peer?

Accepted Answer

The IKE SA is deleted and the tunnel is torn down

Answer

The VPN connection is marked as degraded but traffic continues

Answer

Azure sends an alert but keeps the tunnel active

Answer

The gateway switches to active-active mode automatically

Question 3

Which Azure Monitor metric should you use to monitor the bandwidth utilization of a VPN gateway tunnel?

Accepted Answer

TunnelAverageBandwidth

Answer

TunnelEgressBytes

Answer

GatewayP2SBandwidth

Answer

TunnelPeakBandwidth

Question 4

A company needs to implement VPN gateway transit so that spoke VNets peered to a hub VNet can communicate with on-premises networks via the hub's VPN gateway. Which settings must be enabled?

Accepted Answer

Enable gateway transit on the hub VNet peering and use remote gateways on spoke VNet peerings

Answer

Enable BGP on all spoke VNets and advertise routes to the hub

Answer

Configure UDRs in each spoke pointing to the hub VPN gateway

Answer

Enable Global Peering between all spoke VNets and the hub

Question 5

You need to verify that an Azure VPN gateway is successfully establishing BGP sessions with an on-premises peer. Which Azure CLI command shows the BGP peer status?

Accepted Answer

az network vnet-gateway show-bgp-peer-status --resource-group MyRG --name MyGW

Answer

az network vpn-connection list-bgp-peers --gateway MyGW

Answer

az network vnet-gateway get-bgp-peers --name MyGW

Answer

az network vpn-gateway bgp-peers list --gateway-name MyGW

Question 6

An organization needs to ensure that its VPN gateway can support up to 30 site-to-site tunnels. Which minimum SKU should they select?

Accepted Answer

VpnGw1

Answer

VpnGw2

Answer

VpnGw3

Answer

VpnGw1AZ

Question 7

When coexisting ExpressRoute and site-to-site VPN connections on the same virtual network gateway, which gateway SKU is required?

Accepted Answer

HighPerformance or UltraPerformance (legacy) or VpnGw1 and above with ExpressRoute feature

Answer

VpnGw1

Answer

ErGw1AZ

Answer

Standard