Exam AZ-900 topic 1 question 105 discussion

If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway

Solutions is A and D.

Not to throw a wrench into things but you could also deploy and external LB(AzLB public IP) and have the VMs in the backend pool. With the correct routing rules you could connect to different VMs based on source and destination ports. Thinking about it now, an AppGW would be essentially the same thing. If you are connecting onprem to Azure you have an ISP. To deploy VMs you need VNets as a prerequisite and no optional. The question for this scenario for connecting onprem to Azure, ask for things you SHOULD use. From the list VNG will be one and Vnet, though obvious for VM deployments will be the second. There is a fine line with should and could, VNG would be in the could but that is not what is being asked.

The correct answers are: A. a virtual network gateway E. a gateway subnet Explanation: A. A virtual network gateway: This is required to establish a secure connection between your on-premises network and your Azure virtual network. The virtual network gateway facilitates hybrid connectivity through VPN or ExpressRoute. E. A gateway subnet: This is a specific subnet within your Azure virtual network that hosts the virtual network gateway. It is mandatory for setting up a virtual network gateway.

I Initially went we A&E but after additional research, I am more inclined to go with A&D. I assumed the Azure environment was the virtual network but that's not the case at all. The Azure environment is an inventory of the resources (virtual machines), services, etc. that are available. Therefore what's needed here for connectivity and communication are A & D. I hope this helps! Good luck!

Correct answer is A E https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal Virtual Network Gateway is mandatory in a Gateway subnet called GatewaySubnet

I believe D is the correct one instead of the E because the question is asking specifically about resources, and gateway subnet is a configuration, not a standalone resource by itself. I know, if you have a VM you already have a Virtual Network, but again, we are talking about resources.

The Azure Virtual Network (VNet) and Azure VPN Gateway are essential to enable communication between on-premises client computers and Azure VMs

Virtual Network (VNet): This is essential for creating a private network in Azure where your virtual machines and other resources can reside. It allows you to define the IP address range, subnets, and configure network security groups. Virtual Network Gateway: This is required to establish a secure connection between your on-premises network and the Azure Virtual Network. You can use a VPN Gateway to create a site-to-site VPN connection or an ExpressRoute Gateway for a dedicated private connection.

The correct answers are A (a virtual network gateway) and E (a gateway subnet), not A and D, because: A virtual network gateway (A) is essential for establishing a secure connection (VPN or ExpressRoute) between the on-premises network and Azure Virtual Network (VNet). This gateway is the main point for encrypting and routing the communication. A gateway subnet (E) is a required configuration for a virtual network gateway. It is a specific subnet within the VNet that hosts the gateway and enables connectivity to the on-premises network.

The two Azure resources that must be created for enabling on-premises client computers to communicate with the Azure virtual machines are: D. a virtual network E. a gateway subnet Explanation: D. Virtual Network: To connect Azure virtual machines and provide network connectivity for on-premises systems to reach these VMs, a virtual network (VNet) is essential. E. Gateway Subnet: For the communication to occur between on-premises network and Azure VMs, you need to configure a VPN Gateway in a dedicated gateway subnet within the virtual network. This will enable a secure connection using VPN. The other options, such as load balancers and application gateways, are useful for managing traffic within Azure but are not directly involved in enabling communication between on-premises networks and Azure VMs.

AD Explanation: -A. A virtual network allows your Azure virtual machines to be placed in a network where they can communicate with each other. -D. A virtual network gateway enables the connection between the on-premises network and Azure, allowing communication between on-premises clients and Azure VMs. Other options: -B. A load balancer: Used for distributing traffic across multiple VMs but is not required for this basic communication setup. -C. An application gateway: Primarily for web traffic management and load balancing, but not required for general communication. -E. A gateway subnet: Required for setting up a VPN or ExpressRoute connection, but the virtual network gateway itself is the primary resource.

Virtual Network Gateway This resource is required to establish secure connectivity between your on-premises network and the Azure virtual network (VNet) where your virtual machines reside. It enables a Site-to-Site VPN or ExpressRoute connection. Resource Type: Microsoft.Network/virtualNetworkGateways.

Gateway subnet already part of Vnet Gateway, so I would choose VNG and VNET.

If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway

Key word here is "Azure resources". Subnet is an component of an VNet and the VNet it self is an Azure resource. Therefor the answer must be A and D

The fact that the “Azure environment contains multiple Azure virtual machines” betrays the fact that there is a vnet already. A Vnet is used to provide DHCP and Security Group services to the VM. Without it a VM couldn't obtain an IP Address. It is not possible to create an Azure VM without a vnet. • We can eliminate B from the onset • We can eliminate D for the reasons already explained • We can eliminate C as An Azure Application Gateway allows you to route traffic based on specific URL paths So this leaves A and E as a possible answer A because Every network of any type requires a Network Gateway So the answer is: A. a virtual network gateway E. a gateway subnet