Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 4 question 35 discussion

Actual exam question from Microsoft's AZ-700

Question #: 35
Topic #: 4

DRAG DROP
-

You have an Azure subscription that contains an Azure VPN gateway named GW1. GW1 provides Point-to-Site (P2S) VPN connectivity.

Users connect to GW1 from a Windows 11 device by using an SSTP connection.

You need to ensure that the P2S VPN connections support Azure AD authentication.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Show Suggested Answer

Suggested Answer:

by msherazq at Nov. 9, 2023, 8:38 a.m.

Comments

Submit Cancel

JackeD

Highly Voted 1 year, 7 months ago

this is wrong, openvpn is the right answer.

upvoted 15 times

manhattan

5 months, 2 weeks ago

the answer is correct, you can't use OpenVPN if you need to use SSTP. read the question when it says "Users connect to GW1 from a Windows 11 device by using an SSTP connection." they are two different way, you can select it in the VNG during P2S config, look here https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about#protocol

upvoted 3 times

tester1978

4 months, 3 weeks ago

it literally says this in your article: Microsoft Entra ID authentication is supported only for the OpenVPN protocol

upvoted 2 times

...

msherazq

Highly Voted 1 year, 7 months ago

to AUthenticate using Azure AD , we have to use OpenVPN in the second action.

upvoted 12 times

...

Silverpro29

Most Recent 1 month ago

Correct Sequence: For the point-to-site configuration of GW1: Set Authentication type to Azure Active Directory. Set Tunnel type to OpenVPN (SSL). Grant the Azure VPN application admin consent to the Azure AD tenant. Download the Azure VPN Client profile configuration package and distribute it to users. Explanation: Step 1: Azure AD authentication for P2S VPN requires OpenVPN (SSL) — SSTP does not support Azure AD auth. (Only Azure Certificate or Radius Authentication). Step 2: Granting admin consent allows the Azure VPN client to authenticate users via Azure AD. Step 3: The VPN client profile contains the necessary configuration for users to connect using Azure AD.

upvoted 1 times

...

xRiot007

2 months, 2 weeks ago

The middle box should have OpenVPN as the tunnel type. Here is an overview on what authentication types are supported with each tunnel type. For SSTP we have Radius and Azure Certificate. For Entra we have OpenVPN https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about#authentication

upvoted 2 times

...

getafix

2 months, 2 weeks ago

1. Grant Azure VPN application admin consent. 2. Change tunnel type to OpenVPN SSL (question says Entra ID to be used which is only possible using OpenVPN). 3. Download config and distribute to users

upvoted 1 times

xRiot007

2 months, 2 weeks ago

Question actually says Azure AD authentication.

upvoted 1 times

...

Saba53

4 months, 1 week ago

Grant the Azure VPN Application admin content to the azure AD tenant for the point-to-site configuration of GW1 set authentication type Azure active Directory and set tunnel type to OpenVPN SSL download the azure VPN Client profile configuration package and distribute the package to the users

upvoted 1 times

...

gaurav4101

4 months, 1 week ago

1. Grant the AZURE VPN application Consent 2. Set up AD authentication (Microsoft Entra ID ) using open ssl( Microsoft Entra ID authentication is supported only for the OpenVPN protocol. ) 3. Download Azue vpn client ================== https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-about#protocol

upvoted 2 times

...

Feliphus

7 months, 2 weeks ago

I agree with the solution. I mean about the SSTP utilization versus OpenVPN and the statement marks SSTP utilization. Yes, it's true the OpenVPN (SSL) is the option recomended for P2S and mandatory if you have different client devices than Windows which it's not in this case. In this link https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway you can find how they refer to SSTP as well in the article ......If you configure multiple protocols and SSTP is one of the protocols, then the configured address pool is split between the configured protocols equally..... Last comment: Azure AD is a formerly name, nowaday is Microsoft Entra ID

upvoted 3 times

Feliphus

7 months ago

Sorry but when I was doing a a second round all the questions, I was not sure about this comment. Maybe Microsoft you want you change the tunnel type as well to OpenVPN (SSL) https://learn.microsoft.com/en-us/azure/vpn-gateway/point-to-site-entra-gateway#configure-vpn

upvoted 2 times

...

RemmyT

1 year, 1 month ago

P2S VPN connections support Azure AD authentication [Microsoft Entra ID] 1. Authorize the Azure VPN application • grant admin consent for your organization 2. Configure the VPN gateway • Address pool: client address pool • Tunnel type: OpenVPN (SSL) • Authentication type: Microsoft Entra ID 3. Download the Azure VPN Client profile configuration package https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant

upvoted 2 times

...

LieJ0n

1 year, 2 months ago

Needs OpenVPN like the others mentioned. https://learn.microsoft.com/en-us/azure/vpn-gateway/openvpn-azure-ad-tenant Microsoft Entra authentication is supported only for OpenVPN® protocol connections and requires the Azure VPN Client.

upvoted 1 times

...

Murad01

1 year, 6 months ago

Second selection is wrong, it should be OpenVPN (SSL)

upvoted 6 times

...