Exam 70-741 topic 1 question 107 discussion

Actual exam question from Microsoft's 70-741

Question #: 107
Topic #: 1

You have a Microsoft Azure subscription and an on-premises network.
To the on-premises network, you deploy a new server named Server1 that runs Windows Server 2016. In Azure, you configure a virtual gateway on an Azure virtual network.
You need to ensure that the computers on the on-premises network can access virtual machines on the Azure virtual network.
What should you do on Server1?

A. Install the Remote Access server role. From the Routing and Remote Access Server Setup Wizard, select Secure connection between two private networks.
B. Install the Data Center Bridging (DCB) feature, and then run the Install-RemoteAccess cmdlet.
C. Install the Remote Access server role. From the Routing and Remote Access Server Setup Wizard, select Virtual private network (VPN) access and NAT.
D. Install the Data Center Bridging (DCB) feature, and then run the Enable-RemoteAccessRoutingDomain cmdlet.

Show Suggested Answer

Suggested Answer: A 🗳️

by coleman at Nov. 14, 2019, 12:12 p.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 7 months ago

Routing and Remote Access Server role supports IKEv2 Site-to-Site VPN (using Pre-Shared Key authentication) connections to remote location including Azure cloud by selecting "Secure connection between two private networks", see detail implementation steps in above link.

upvoted 21 times

coleman

5 years, 7 months ago

. https://blogs.technet.microsoft.com/jletsch/2016/03/15/lets-configure-azure-site-to-site-vpn-with-rras-in-azure-resource-manager/ https://blogs.technet.microsoft.com/diegoviso/2014/10/28/creating-a-site-to-site-s2s-vpn-to-azure-with-rras-one-physical-nic-and-a-nat-gateway/ .

upvoted 6 times

...

Robbr

4 years, 8 months ago

As always, in the given answer, I look for Coleman explanation, you're the best man. Thanks for sharing your knowledge

upvoted 10 times

...

Yebubbleman

Most Recent 4 years, 5 months ago

It's A. I can see where someone might forget the options on the initial wizard and think C though (figuring that the specificity of site-to-site comes later in the process). Definitely either try this on a test server instance or watch a video to see it in action.

upvoted 1 times

...

panda

4 years, 7 months ago

On Routing and Remote Access screen, you don't have "Virtual private network (VPN) access". You have "Virtual private network (VPN) gateway". Therefore, C isn't correct. A is correct. https://www.znetlive.com/blog/how-to-configure-vpn-on-windows-server/ Of course, B and D aren't correct. https://docs.microsoft.com/en-us/windows-server/networking/technologies/dcb/dcb-top

upvoted 2 times

panda

4 years, 5 months ago

Sorry, I made mistake. Since you must connect between two private network, A is correct. Since you don't connect to public IP address and NAT isn't needed, C isn't correct.

upvoted 1 times

...

algerianphoenix

4 years, 10 months ago

I think that's a Site-to-Site VPN scenario, so A is the correct Answer.

upvoted 3 times

...

tchau

4 years, 10 months ago

Right answer is C

upvoted 1 times

Rijvi

4 years, 5 months ago

why c can you explain ?

upvoted 1 times

...