Exam AZ-303 topic 5 question 74 discussion

"What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required IN AZURE?" 2 IPS in Azure and 2 on prem - so only 2 In azure 2 Gateways in azure 2 local in azure

1 - 1 - 2 ?? https://www.examtopics.com/exams/microsoft/az-300/view/15/

1 - 1 - 2 firstly the question is about how many in Azure , ignore all on-prem counts 1 VNET , you can only have 1 VPN Gateway in a VNET, which will be on active/standby , sharing 1 public IP between the active/standby gateway 2 Local Network gateways in azure to represent the 2 VPN devices on-prem

2:2:2 - clearly asked ON AZURE end only not for the entire solution. In this configuration, each Azure gateway instance will have a unique public IP address, and each will establish an IPsec/IKE S2S VPN tunnel to your on-premises VPN device specified in your local network gateway and connection. Note that both VPN tunnels are actually part of the same connection. You will still need to configure your on-premises VPN device to accept or establish two S2S VPN tunnels to those two Azure VPN gateway public IP addresses.

Even though 4, 2, 2 is correct, when Azure VNET connected S-2-S , another VNET is on standby . hence, minimum; can be 3,1,2

2 IP - when you configure VNG you must provide 2 addresses 1 VNG - Active-Active 2 LNG - "The data center contains two VPN devices"

2-1-2 is the right answer: - 2 Public IP Addresses required for a VPN gateway active-active (https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell#1-create-the-public-ip-addresses-and-gateway-ip-configurations) - 1 Virtual Network Gateway in active-active mode ( https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell#1-create-the-public-ip-addresses-and-gateway-ip-configurations) - 2 Local Network Gateways (https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell#1-create-the-public-ip-addresses-and-gateway-ip-configurations)

The answer should be 2/2/4. If you do active/active, you'll need 4 LNGs since it's a mesh network. 2 LNG per VNG since 2 VPN devices on prem. Since the wording change for VNGs to now be about 1 to 3 minutes it's safe to assume that you'll need to go with active/active to accomplish the 2-minute requirement and that will result with: 2 PIPs in Azure for the 2 VNGs. 2 VNGs 4 LNGs.

2-1-2 ---

I think the answer is 2-1-2 If you read this guide. https://docs.microsoft.com/en-us/azure/vpn-gateway/active-active-portal You create a single virtual network gateway, with 2 public IP addresses and 2 local network gateway.

Active-Standby. For unplanned issues, the connection recovery will be longer, about 1 to 3 minutes in the worst case. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#about-vpn-gateway-redundancy Active-Standby can cause interruption up to 3 minutes, so we need Active-Active. 2 IPs - 1 for each instance of VPN instance. 1 VPN GW - VPN GW Active-Active mode creates two instances. (though you only see 1 VPN GW in Azure) 2 Local GWs - 1 for each on-prem VPN device

Answer should be 2-1-2 as you need to create only one VPN GW in azure the other will be created automatically does not matter if you select active-active mode is enabled or disabled.

I must say - Correct Answer given. PIP = 2 PIP for Local Network Gateway + 2 PIP for VN Gateway Instances = 4 //The local network gateways corresponding to your VPN devices must have unique public IP addresses in the "GatewayIpAddress" property. VNG = 2 (Active-Active) LNG = 2 Reason - https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable#dual-redundancy-active-active-vpn-gateways-for-both-azure-and-on-premises-networks Reason for VNG = 2:- "For planned maintenance, the connectivity should be restored within 10 to 15 seconds. For unplanned issues, the connection recovery will be longer, about 1 to 3 minutes in the worst case" As per question, it should be less than 2 minutes. Hence need VNG : Active-Active Reason for PIP = 4:- "The local network gateways corresponding to your VPN devices must have unique public IP addresses in the "GatewayIpAddress" property"

same question in AZ-104, keyword: required in Azure only. So, the correct answer should be 2 public IP addresses 1 virtual network gateways 1 local network gateways If the question mention about Azure on onPremise. then, it will be 4,2,2

I think the ans should be：1-1-2

Think it's 4-2-2 because a local gateway network and public ip's of the on-premise endpoints must be supplied in the vpn config in Azure.

"For unplanned issues, the connection recovery will be longer, about 1 to 3 minutes in the worst case." So active/active is required -> 2-2-2