ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 5 question 56 discussion

Actual exam question from Microsoft's AZ-104
Question #: 56
Topic #: 5
[All AZ-104 Questions]

HOTSPOT -
You manage two Azure subscriptions named Subscription1 and Subscription2.
Subscription1 has following virtual networks:

The virtual networks contain the following subnets:

Subscription2 contains the following virtual network:
✑ Name: VNETA
✑ Address space: 10.10.128.0/17
✑ Location: Canada Central
VNETA contains the following subnets:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
by Thuncroow at April 30, 2021, 1:35 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
mlantonis
Highly Voted 4 years, 1 month ago
Correct Answer: VNET1: 10.10.10.0 - 10.10.10.255 VNET2: 172.16.0.0 - 172.16.255.255 VNETA: 10.10.128.0 - 10.10.255.255 Box 1: No To create a VNet to VNet VPN you need to have a special Gateway Subnet. Here, the VNet has no sufficient address space to create a Gateway Subnet and thus to establish a VNet to VNet VPN connection. Box 2: Yes For VNet peering the only consideration is that the VNets do not overlap. VNET1 and VNET2 do not overlap. Box 3: Yes For VNet peering the only consideration is that the VNets do not overlap. VNET1 and VNETA do not overlap.
upvoted 240 times
efd324e
6 months, 2 weeks ago
To establish a site-to-site VPN connection between VNET1 and VNET2, you do need a specific subnet called the GatewaySubnet in each virtual network. This subnet is required for the VPN gateway to function properly12. Without the GatewaySubnet, you won't be able to create the VPN gateway, and thus, you can't establish the site-to-site VPN connection. So, in your current setup, you would need to create the GatewaySubnet in both VNET1 and VNET2 to proceed with the connection. Copiloto source. The answer in the box1 i think its "No". Box2: "Yes" Box3:"Yes"
upvoted 4 times
...
Dankho
8 months, 1 week ago
Completely agree on NO for Box1, since VNet1's subnet has the same address space as VNET1, there is no room for a gateway subnet which needs /27 or 32 addresses.
upvoted 1 times
...
23169fd
1 year ago
I do not agree. Tested in Lab. Box 1: Yes because A Site-to-Site VPN connection can be established as long as the address spaces do not overlap, and the connection is configured correctly. Box 3: No because Both VNets have overlapping address spaces, making peering not possible.
upvoted 2 times
Dankho
8 months, 1 week ago
wrong, just love saying that, makes me feel like DJT :) but ya it's wrong. You need room for the gateway subnet and VNET1 has a subnet with the same address space and mask so no.
upvoted 2 times
...
alsmk2
10 months, 1 week ago
Box 1 is no - you need a vpn gateway at each side. How do you deploy that without a gateway subnet at each side? There's no room. Box 3: Yes - 10.10.10.0/24 does not overlap with 10.10.128.0/17 10.10.10.0/24 = 10.10.10.0 to 10.10.10.255 10.10.128.0/17 = 10.10.128.0 to 10.10.255.255
upvoted 5 times
...
...
piotrekpal
3 years ago
About Box 1: Site-to-Site connection is dedicated to Azure - On Premise connection NOT Azure-Azure.
upvoted 7 times
Lazylinux
2 years, 11 months ago
Not entirely true, i though so myself but then realized can be done with some difference here is link you can read..MS is so confusing sh*t...Make it simple Stupid I just dont see why not keep it peering for vnet-vnet and S-S for Azure and On-prem Hope this helps https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal
upvoted 7 times
David1123
2 years, 10 months ago
We can modify the subnet11 and add Gatewaysubnet, thus YES, a site-to-site connection can be established between VNET1 and VNET2
upvoted 3 times
op22233
1 year, 1 month ago
You cannot modify because the questions asked are based on the details specified in the question.
upvoted 2 times
...
Load full discussion...
...
skydivex
2 years, 3 months ago
you are correct... nice findings.... as the link explains, VNET to VNET is the same as S2S, but the IP settings are done automatically. you do not need to create gateway subnet.... the correct answers is YES, Yes, Yes
upvoted 2 times
Mehul078
1 year, 11 months ago
You DO need a subnet. See documentation here: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal#create-the-vnet1-gateway
upvoted 2 times
...
...
...
...
Load full discussion...
...
Thuncroow
Highly Voted 4 years, 1 month ago
The answer should be N-Y-Y : 1: No because to create a Vnet to Vnet VPN you need to have a special gateway subnet. Here the Vnet has only /24 CIDR blocks of address space and this space is already taken by its Subnet. Hence there is no sufficient address space to create a gateway subnet and thus to establish a Vnet to Vnet VPN connection. For 2 & 3 : They address spaces for the Virtual network don't overlap, we can thus establish a peering connection between the Virtuals Networks.
upvoted 91 times
Moyuihftg
4 years, 1 month ago
Yes, good observation!
upvoted 7 times
...
MrJR
3 years, 10 months ago
Well you could create the gateway subnet in VNET2 but would that be a S2S connection between VNET2 and VNET1 instead of VNET1 and VNET2. Is the question saying that the connection must be established from VNET1. That's tricky.
upvoted 1 times
...
kansaj
3 years, 8 months ago
i think its 1.:YES u can do site to site because there is nothing that blocks that option 2.: YES u can peer vnet1 to vnet2 3.:no because its different subscription
upvoted 2 times
Marciojsilva
3 years, 6 months ago
If the virtual networks are in different subscriptions, and the subscriptions are associated with different Azure Active Directory tenants, complete the following steps before continuing: Add the user from each Active Directory tenant as a guest user in the opposite Azure Active Directory tenant. Each user must accept the guest user invitation from the opposite Azure Active Directory tenant.
upvoted 2 times
...
...
shykot
2 years, 11 months ago
after 1 year of your answer it seems MS has brought this feature, so answer become YES for 1st question even after so long check, I cant figure why NO to last asnwer
upvoted 1 times
...
Load full discussion...
...
[Removed]
Most Recent 8 months, 3 weeks ago
WRONG No Yes Yes
upvoted 3 times
...
090200f
1 year ago
YYY is the answer
upvoted 1 times
...
bobothewiseman
1 year, 2 months ago
should be YYY Vnet-Vnet can be established without gateway Vnet1 and Vnet2 can be peered (no overlapping) Vnet1 and VnetA can be peered (no overlapping)
upvoted 1 times
...
tashakori
1 year, 3 months ago
No Yes Yes
upvoted 2 times
...
tashakori
1 year, 3 months ago
No Yes Yes
upvoted 2 times
...
1828b9d
1 year, 3 months ago
This question was in exam 01/03/2024
upvoted 2 times
...
clg003
1 year, 8 months ago
No Yes Yes... Totally agree with Mlantonis... Box 1 no; they purposely eliminated the possibility of other subnets to make sure you understand that Site to Site requires Gateway Subnet. Box 2 and 3 Yes; They do not overlap so you're good to go.
upvoted 1 times
...
KM
1 year, 9 months ago
Answer is YYY VNET1 and VNETA can be peer: VNET1: 10.10.10.0/24 - First IP 10.10.10.0, Last IP 10.10.10.255 VNETA: 10.10.128.0/17 - First IP 10.10.128.0, Last IP 10.10.255.255
upvoted 2 times
...
nomanmalik101
1 year, 10 months ago
whom should we follow? discussion of examtopic answers?
upvoted 1 times
...
nomanmalik101
1 year, 10 months ago
what the hell? every second question has confusion. Why are we not able to get the exact answers even after paying huge amount?
upvoted 2 times
...
Josete1106
1 year, 11 months ago
N Y Y is correct!
upvoted 3 times
...
NurSalman
1 year, 11 months ago
Thats a lot of wrong answers, i payed 40 dollar for this.
upvoted 15 times
SgtDumitru
1 year, 6 months ago
We're preparing for a Microsoft Exam. We all pay for something wrong.
upvoted 1 times
...
Nedu1
1 year, 10 months ago
lols....
upvoted 1 times
...
...
RandomNickname
1 year, 12 months ago
Agree with N,Y,Y For Box1: https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal#about-the-gateway-subnet "If you see an error that specifies that the address space overlaps with a subnet, or that the subnet isn't contained within the address space for your virtual network, check your VNet address range. You may not have enough IP addresses available in the address range you created for your virtual network. For example, if your default subnet encompasses the entire address range, there are no IP addresses left to create additional subnets. You can either adjust your subnets within the existing address space to free up IP addresses, or specify an additional address range and create the gateway subnet there."
upvoted 3 times
...
vbohr899
2 years, 3 months ago
Cleared Exam today 26 Feb, This question was there in exam.
upvoted 7 times
...
zellck
2 years, 4 months ago
NYY is the answer. https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal#about-the-gateway-subnet The virtual network gateway uses specific subnet called the gateway subnet. The gateway subnet is part of the virtual network IP address range that you specify when configuring your virtual network. It contains the IP addresses that the virtual network gateway resources and services use. When you create the gateway subnet, you specify the number of IP addresses that the subnet contains. The number of IP addresses needed depends on the VPN gateway configuration that you want to create. Some configurations require more IP addresses than others. We recommend that you create a gateway subnet that uses a /27 or /28. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering?tabs=peering-portal#requirements-and-constraints The virtual networks you peer must have non-overlapping IP address spaces.
upvoted 2 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel