Exam AZ-700 topic 1 question 3 discussion

Looks like the question number got changed/updated. Now, this question is around setting up BGP for a Site-to-Site VPN . The given answers: A)Virtual Network Gateways and D) Local Network Gateways are correct as they are the key component required to setup S2S VPN tunnel.

The correct answers are A. a virtual network gateway and D. a local network gateway. To configure BGP for a Site-to-Site VPN connection between a datacenter and Azure, you will need to configure a virtual network gateway and a local network gateway. The virtual network gateway will be used to establish the VPN connection between your datacenter and Azure, and the local network gateway will be used to define the on-premises network that you want to connect to Azure. Azure Application Gateway, Azure Firewall, and Azure Front Door are not relevant to this scenario, because they are not used for configuring BGP for a Site-to-Site VPN connection.

I think the correct answer is A y D: -To establish a cross-premises connection, you need to create a Local Network Gateway to represent your on-premises VPN device, and a Connection to connect the VPN gateway with the local network gateway. -BGP requires a Route-Based VPN gateway, and also the addition parameter, -Asn, to set the ASN (AS Number) for VNet. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-bgp-resource-manager-ps

A & D PART 1 STEP 2: Create the VPN gateway for TestVNet1 with BGP parameters In this step, you create a VPN gateway with the corresponding BGP parameters. In the Azure portal, navigate to the Virtual Network Gateway resource from the Marketplace, and select Create. PART2 STEP 1: Configure BGP on the local network gateway In this step, you configure BGP on the local network gateway. https://docs.microsoft.com/en-us/azure/vpn-gateway/bgp-howto

This question is also asked on the AZ-900 exam.

Correct Answers are A and D

Answer is AD

A. If the IPsec tunnel fails to establish, Azure will keep retrying every few seconds. For this reason, troubleshooting "VPN down" issues is very convenient on IKEdiagnosticLog because you do not have to wait for a specific time to reproduce the issue. https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics#IKEDiagnosticLog

Correct answer A & D.

A&D is correct as virt NGW & local NGW are prereq for s2s vpn

Virtual Network Gateway, and; Local Network Gateway.

Correct

correct ! AD Domain authentication allows users to connect to Azure using their organization domain credentials. It requires a RADIUS server that integrates with the AD server. Organizations can also leverage their existing RADIUS deployment.

Given answers are correct!