Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 5 question 27 discussion

Actual exam question from Microsoft's AZ-104
Question #: 27
Topic #: 5
[All AZ-104 Questions]

DRAG DROP -
You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN.
In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24.
You need to create a site-to-site VPN to Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
ZUMY
Highly Voted 3 years, 1 month ago
The answers are in order and are correct. Always work from the Azure side first, it's a dependency. Dependency is the key to all order obviously... 1 - Start with a Gateway subnet. You need the subnet in place first before you can associate a VPN gateway with it, which is what is created next. 2 - Create a VPN gateway. Associate the VPN gateway with the gateway subnet you created (there are other steps but for the sake of what is available for answers, the prem side is now configured) Now for the premice side. 3. Create a local gateway. You need the local gateway in order to complete the tunnel, then you can create a VPN connection
upvoted 305 times
ErenYeager
2 years, 12 months ago
I hereby declare this answer fit for viewership🙃
upvoted 57 times
LeomHD
2 years, 6 months ago
according this url, a vpn gateway is created first and then the subnet gateway, could you help me to clarify it? https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
upvoted 1 times
magichappens
2 years ago
Doesn't matter. If you don't have a gateway subnet, one will be created during gateway setup.
upvoted 3 times
...
...
...
ShaulS
2 years, 5 months ago
What's the fourth answer?
upvoted 1 times
pappkarcsiii
2 years, 2 months ago
4. then you can create a VPN connection
upvoted 2 times
...
...
...
mlantonis
Highly Voted 2 years, 11 months ago
Correct Answer: As per documentation: 1. Create a virtual network 2. Create a VPN gateway 3. Create a local network gateway 4. Create a VPN connection 5. Verify the connection 6. Connect to a virtual machine Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-classic-portal
upvoted 116 times
jeru81
2 months, 2 weeks ago
but vnet1 already exists.
upvoted 1 times
...
...
tashakori
Most Recent 1 month ago
Given answer is correct
upvoted 1 times
...
Josete1106
9 months, 1 week ago
1. Create a gateway subnet 2. Create a VPN gateway 3. Create a local network gateway 4. Create a VPN connection
upvoted 6 times
...
CyberKelev
1 year, 1 month ago
The correct order of actions to create a site-to-site VPN to Azure from an on-premises network is as follows: Create a local network gateway in Azure that represents the on-premises network, specify the public IP address of the VPN device, and define the address space of the on-premises network. Create a VPN gateway in Azure and configure the gateway type, VPN type, and SKU. Create a gateway subnet in VNet1 to host the VPN gateway. Create a VPN connection between the on-premises VPN device and the Azure VPN gateway, specify the shared key, and select the local network gateway and the VPN gateway. Note: Creating a custom DNS server is not necessary for creating a site-to-site VPN connection.
upvoted 1 times
...
CyberKelev
1 year, 1 month ago
The correct order of actions to create a site-to-site VPN to Azure from an on-premises network is as follows: Create a local network gateway in Azure that represents the on-premises network, specify the public IP address of the VPN device, and define the address space of the on-premises network. Create a VPN gateway in Azure and configure the gateway type, VPN type, and SKU. Create a connection between the on-premises VPN device and the Azure VPN gateway, specify the shared key, and select the local network gateway and the VPN gateway. Configure the on-premises VPN device to connect to the Azure VPN gateway, specify the public IP address of the Azure VPN gateway, and configure the necessary settings, such as the authentication method, encryption algorithm, and IKE version
upvoted 1 times
...
klexams
1 year, 5 months ago
create gateway subnet part of creating vpn gateway create virtual network gateway / vpn gatewat create local gw create vpn connection
upvoted 2 times
...
Seb
1 year, 7 months ago
Answers are in order and are Correct, more info: https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal
upvoted 1 times
...
libran
1 year, 7 months ago
Given Answer is Correct 1. Gateway subnet 2. VPN Gateway 3. Local Gateway 4. Create VPN Connection
upvoted 6 times
...
EmnCours
1 year, 8 months ago
The answers are in order and are correct.
upvoted 2 times
...
Lazylinux
1 year, 10 months ago
The requirements are as per below Create a virtual network ***( That is the Gateway Subnet)*** Create a VPN gateway, A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet Create a local network gateway ** The purpose for this GW is to have replica information about the on-prem VPN GW and provides it to the Azure VPN GW*** such info is Public IP and the private IP address pool. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway. Create a VPN connection, The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic Verify the connection Connect to a virtual machine
upvoted 7 times
...
cloudera
1 year, 10 months ago
1. Gateway subnet 2. VPN Gateway 3. Local Network Gateway 4. Create VPN Connection
upvoted 2 times
cloudera
1 year, 10 months ago
You could start from VPN Gateway but will require you to create a subnet first before your can progress with creating VPN Gateway. This mean creating a subnet is the first step.
upvoted 1 times
...
...
benvdw
2 years, 1 month ago
on exam 13/3/2022
upvoted 1 times
...
FabioVi
2 years, 3 months ago
Creating the gateway subnet is not mandatory, because if you go straight to create the VPN gateway and you have not previously created the gateway subnet, Azure suggests a range for creating the gateway subnet on the fly along with VPN gateway creation... But as the questions requires 4 responses, and there are 2 that does not make sense, so creating a gateway subnet is the first in order, and the following 3 are OK, so answer is correct :-)
upvoted 3 times
...
khengoolman
2 years, 6 months ago
Passed 11 Oct 2021 with 947. This question appeared, correct Answer
upvoted 8 times
...
AubinBakana
2 years, 7 months ago
Easy! :)
upvoted 1 times
...
Adebowale
2 years, 8 months ago
Good work guys on this discussions. Very very educator and enlightening
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...