ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 5 question 41 discussion

Actual exam question from Microsoft's AZ-104
Question #: 41
Topic #: 5
[All AZ-104 Questions]

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using
Azure ExpressRoute.
You plan to prepare the environment for automatic failover in case of ExpressRoute failure.
You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Create a connection
  • B. Create a local site VPN gateway
  • C. Create a VPN gateway that uses the VpnGw1 SKU
  • D. Create a gateway subnet
  • E. Create a VPN gateway that uses the Basic SKU
Show Suggested Answer Hide Answer
Suggested Answer: ABC 🗳️
by Lobe at Dec. 1, 2020, 12:03 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
mlantonis
Highly Voted 4 years, 1 month ago
Correct Answer: A, B and C For a site to site VPN, you need: - a local gateway - a gateway subnet - a VPN gateway - a connection to connect the local gateway and the VPN gateway However, the question states that VNet1 connects to your on-premises network by using Azure ExpressRoute. For an ExpressRoute connection, VNET1 must already be configured with a gateway subnet so we don't need another one. Note: BasicSKU cannot coexist with ExpressRoute. You must use a non-Basic SKU gateway for both the ExpressRoute gateway and the VPN gateway.
upvoted 205 times
cloudera
3 years ago
Th question asked to pick 3 options. I believe a correct answer can also be BCD as well.
upvoted 4 times
...
mlantonis
4 years, 1 month ago
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal https://azure.microsoft.com/es-es/pricing/details/vpn-gateway
upvoted 20 times
...
...
Leandroalonso
Highly Voted 4 years, 6 months ago
Vnet1 is already connected by ExpressRoute, wich we presume that the subnet gateway was already created. SKU need to be VpnGw1 because Basic does not coexist with ExpressRoute. So, answers should be A, B and C.
upvoted 139 times
Hibs2016
4 years, 6 months ago
Do you have a link for Basic not working with ExpressRoute?
upvoted 1 times
jimmyli
4 years, 6 months ago
here: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager in which it reads, "Next, create your Site-to-Site VPN gateway. For more information about the VPN gateway configuration, see Configure a VNet with a Site-to-Site connection. The "GatewaySku is only supported for VpnGw1, VpnGw2, VpnGw3, Standard, and HighPerformance VPN gateways. ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU. The VpnType must be RouteBased."
upvoted 18 times
irosh412
4 years, 1 month ago
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager#add
upvoted 2 times
...
...
...
QiangQiang
4 years, 5 months ago
I think you are 100% right
upvoted 6 times
...
VladanO
3 years ago
You right. answer: A,B,C See link https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager "ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU."
upvoted 2 times
...
...
Nathan12345
Most Recent 4 months ago
Selected Answer: BCD
it's an old question, steps has been changed.
upvoted 2 times
...
[Removed]
9 months ago
Selected Answer: ABC
ABC are correct
upvoted 3 times
...
23169fd
1 year ago
why not B C D
upvoted 1 times
090200f
1 year ago
it already using Express route.. so already exists D,, now we need only C, B and A(in order)
upvoted 1 times
...
...
WeepingMaplte
1 year, 1 month ago
Selected Answer: BCD
Question seems to be obsolete already as there has been changes since 4 years ago till now. These are the new steps: Create a virtual network. Create a VPN gateway. Create a local network gateway. Create a VPN connection. https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
upvoted 4 times
...
mkhlszf
1 year, 2 months ago
Selected Answer: ABC
I dont like the options, but after reading a lot on the topic I'll go with A.B.C The gateway subnet already exists for the ExpressRoute, using it for both services is the main topic of the question so it can't be D. The VPN Gateway cannot have a Basic SKU so it cant be E. "ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU." https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager?tabs=new-virtual-network
upvoted 2 times
...
tashakori
1 year, 3 months ago
A, B and E is correct
upvoted 1 times
...
CHOKRIBS88
1 year, 8 months ago
Can this question appear in the exam after the new update of july 2023?
upvoted 3 times
...
yoursminetoo
1 year, 9 months ago
Answer is B,C,D
upvoted 2 times
...
Sri944
1 year, 11 months ago
Yes, a VPN gateway with the VPNGW1 SKU (Virtual Network Gateway SKU) can coexist with ExpressRoute. Azure allows for the coexistence of VPN gateways and ExpressRoute connections within the same virtual network. This configuration is known as "VPN coexistence" or "VPN ExpressRoute coexistence." It enables you to have both VPN-based connectivity and ExpressRoute connectivity to your Azure resources, providing flexibility and redundancy.
upvoted 1 times
...
quocdunginfo2
1 year, 12 months ago
Selected Answer: ABC
BasicSKU cannot coexist with ExpressRoute. You must use a non-Basic SKU gateway for both the ExpressRoute gateway and the VPN gateway.
upvoted 2 times
...
Exilic
2 years ago
Selected Answer: BDE
OpenAI "To connect VNet1 to the on-premises network using a site-to-site VPN while minimizing cost, you should perform the following three actions: B. Create a local site VPN gateway: A local site VPN gateway represents the on-premises VPN device. By creating a local site VPN gateway, you can establish a connection between your on-premises network and Azure. D. Create a gateway subnet: The gateway subnet is a subnet dedicated to hosting the VPN gateway. You need to create a gateway subnet within VNet1 to deploy the VPN gateway. E. Create a VPN gateway that uses the Basic SKU: The Basic SKU is the most cost-effective option for a VPN gateway. It provides the necessary functionality for site-to-site connectivity between your on-premises network and Azure. So, the correct actions to perform are B, D, and E."
upvoted 2 times
Exilic
2 years ago
Me Does basic SKU support express route ChatGPT I apologize for the confusion in my previous response. The Basic SKU does not support ExpressRoute connectivity. It only supports site-to-site VPN connectivity. If you want to prepare the environment for automatic failover in case of ExpressRoute failure, you would need to use the High Performance or Ultra Performance SKU for the VPN gateway. Therefore, the correct actions to perform in this scenario would be: A. Create a connection: This refers to creating a connection object that represents the link between your virtual network and the on-premises network. C. Create a VPN gateway that uses the VpnGw1 SKU: This SKU supports ExpressRoute connectivity and provides the necessary performance and capabilities for automatic failover in case of ExpressRoute failure. D. Create a gateway subnet: A gateway subnet is required to host the VPN gateway. So, the correct actions to perform are A, C, and D.
upvoted 1 times
...
...
Rams_84zO6n
2 years, 2 months ago
Selected Answer: ABC
It can't be D or E. Since express route exist already, it must have a gateway subnet. BasicSKUs can't co-exist with express route gateway. https://learn.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager
upvoted 3 times
...
wolf13
2 years, 4 months ago
Create a local site VPN gateway This will allow you to provide the local gateway settings, for example public IP and the on-premises address space, so that the Azure VPN gateway can connect to it. Create a Connection You need to link the ExpressRoute gateway to the ExpressRoute circuit. After this step has been completed, the connection between your on-premises network and Azure through ExpressRoute will be established. Create a VPN gateway that uses the VpnGw1 SKU The GatewaySku is only supported for VpnGw1, VpnGw2, VpnGw3, Standard, and HighPerformance VPN gateways. ExpressRoute-VPN Gateway coexist configurations are not supported on the Basic SKU. The VpnType must be RouteBased.
upvoted 1 times
...
Notteb
2 years, 5 months ago
Selected Answer: ABC
Following mIantonis, seems logical. Just maybe not in the ABC order, rather CBA i believe
upvoted 2 times
...
sourabhg
2 years, 7 months ago
Selected Answer: ABC
Vnet1 is already connected by ExpressRoute, wich we presume that the subnet gateway was already created. SKU need to be VpnGw1 because Basic does not coexist with ExpressRoute. So, answers should be A, B and C.
upvoted 2 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel