Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 5 question 41 discussion

Actual exam question from Microsoft's AZ-104

Question #: 41
Topic #: 5

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using
Azure ExpressRoute.
You plan to prepare the environment for automatic failover in case of ExpressRoute failure.
You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create a connection
B. Create a local site VPN gateway
C. Create a VPN gateway that uses the VpnGw1 SKU
D. Create a gateway subnet
E. Create a VPN gateway that uses the Basic SKU

Show Suggested Answer

Suggested Answer: ABC 🗳️

by Lobe at Dec. 1, 2020, 12:03 a.m.

Comments

Submit Cancel

mlantonis

Highly Voted 4 years, 2 months ago

Correct Answer: A, B and C For a site to site VPN, you need: - a local gateway - a gateway subnet - a VPN gateway - a connection to connect the local gateway and the VPN gateway However, the question states that VNet1 connects to your on-premises network by using Azure ExpressRoute. For an ExpressRoute connection, VNET1 must already be configured with a gateway subnet so we don't need another one. Note: BasicSKU cannot coexist with ExpressRoute. You must use a non-Basic SKU gateway for both the ExpressRoute gateway and the VPN gateway.

upvoted 206 times

cloudera

3 years, 2 months ago

Th question asked to pick 3 options. I believe a correct answer can also be BCD as well.

upvoted 4 times

...

mlantonis

4 years, 2 months ago

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal https://azure.microsoft.com/es-es/pricing/details/vpn-gateway

upvoted 20 times

...

Leandroalonso

Highly Voted 4 years, 8 months ago

Vnet1 is already connected by ExpressRoute, wich we presume that the subnet gateway was already created. SKU need to be VpnGw1 because Basic does not coexist with ExpressRoute. So, answers should be A, B and C.

upvoted 139 times

Hibs2016

4 years, 8 months ago

Do you have a link for Basic not working with ExpressRoute?

upvoted 1 times

jimmyli

4 years, 7 months ago

here: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager in which it reads, "Next, create your Site-to-Site VPN gateway. For more information about the VPN gateway configuration, see Configure a VNet with a Site-to-Site connection. The "GatewaySku is only supported for VpnGw1, VpnGw2, VpnGw3, Standard, and HighPerformance VPN gateways. ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU. The VpnType must be RouteBased."

upvoted 18 times

irosh412

4 years, 3 months ago

https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager#add

upvoted 2 times

...

QiangQiang

4 years, 6 months ago

I think you are 100% right

upvoted 6 times

...

VladanO

3 years, 2 months ago

You right. answer: A,B,C See link https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager "ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU."

upvoted 2 times

...

Nathan12345

Most Recent 5 months, 3 weeks ago

Selected Answer: BCD

it's an old question, steps has been changed.

upvoted 2 times

...

23169fd

1 year, 2 months ago

why not B C D

upvoted 1 times

090200f

1 year, 2 months ago

it already using Express route.. so already exists D,, now we need only C, B and A(in order)

upvoted 1 times

...

WeepingMaplte

1 year, 3 months ago

Selected Answer: BCD

Question seems to be obsolete already as there has been changes since 4 years ago till now. These are the new steps: Create a virtual network. Create a VPN gateway. Create a local network gateway. Create a VPN connection. https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

upvoted 4 times

...

mkhlszf

1 year, 3 months ago

Selected Answer: ABC

I dont like the options, but after reading a lot on the topic I'll go with A.B.C The gateway subnet already exists for the ExpressRoute, using it for both services is the main topic of the question so it can't be D. The VPN Gateway cannot have a Basic SKU so it cant be E. "ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU." https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager?tabs=new-virtual-network

upvoted 2 times

...

tashakori

1 year, 4 months ago

A, B and E is correct

upvoted 1 times

...

CHOKRIBS88

1 year, 10 months ago

Can this question appear in the exam after the new update of july 2023?

upvoted 3 times

...

yoursminetoo

1 year, 11 months ago

Answer is B,C,D

upvoted 2 times

...

Sri944

2 years, 1 month ago

Yes, a VPN gateway with the VPNGW1 SKU (Virtual Network Gateway SKU) can coexist with ExpressRoute. Azure allows for the coexistence of VPN gateways and ExpressRoute connections within the same virtual network. This configuration is known as "VPN coexistence" or "VPN ExpressRoute coexistence." It enables you to have both VPN-based connectivity and ExpressRoute connectivity to your Azure resources, providing flexibility and redundancy.

upvoted 1 times

...

quocdunginfo2

2 years, 1 month ago

Selected Answer: ABC

BasicSKU cannot coexist with ExpressRoute. You must use a non-Basic SKU gateway for both the ExpressRoute gateway and the VPN gateway.

upvoted 2 times

...

Exilic

2 years, 2 months ago

Selected Answer: BDE

OpenAI "To connect VNet1 to the on-premises network using a site-to-site VPN while minimizing cost, you should perform the following three actions: B. Create a local site VPN gateway: A local site VPN gateway represents the on-premises VPN device. By creating a local site VPN gateway, you can establish a connection between your on-premises network and Azure. D. Create a gateway subnet: The gateway subnet is a subnet dedicated to hosting the VPN gateway. You need to create a gateway subnet within VNet1 to deploy the VPN gateway. E. Create a VPN gateway that uses the Basic SKU: The Basic SKU is the most cost-effective option for a VPN gateway. It provides the necessary functionality for site-to-site connectivity between your on-premises network and Azure. So, the correct actions to perform are B, D, and E."

upvoted 2 times

Exilic

2 years, 2 months ago

Me Does basic SKU support express route ChatGPT I apologize for the confusion in my previous response. The Basic SKU does not support ExpressRoute connectivity. It only supports site-to-site VPN connectivity. If you want to prepare the environment for automatic failover in case of ExpressRoute failure, you would need to use the High Performance or Ultra Performance SKU for the VPN gateway. Therefore, the correct actions to perform in this scenario would be: A. Create a connection: This refers to creating a connection object that represents the link between your virtual network and the on-premises network. C. Create a VPN gateway that uses the VpnGw1 SKU: This SKU supports ExpressRoute connectivity and provides the necessary performance and capabilities for automatic failover in case of ExpressRoute failure. D. Create a gateway subnet: A gateway subnet is required to host the VPN gateway. So, the correct actions to perform are A, C, and D.

upvoted 1 times

...

Rams_84zO6n

2 years, 4 months ago

Selected Answer: ABC

It can't be D or E. Since express route exist already, it must have a gateway subnet. BasicSKUs can't co-exist with express route gateway. https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager

upvoted 3 times

...

wolf13

2 years, 5 months ago

Create a local site VPN gateway This will allow you to provide the local gateway settings, for example public IP and the on-premises address space, so that the Azure VPN gateway can connect to it. Create a Connection You need to link the ExpressRoute gateway to the ExpressRoute circuit. After this step has been completed, the connection between your on-premises network and Azure through ExpressRoute will be established. Create a VPN gateway that uses the VpnGw1 SKU The GatewaySku is only supported for VpnGw1, VpnGw2, VpnGw3, Standard, and HighPerformance VPN gateways. ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU. The VpnType must be RouteBased.

upvoted 1 times

...