AZ-700 VPN Gateway 1 — Questions and Answers
Question 1: Which Azure VPN Gateway SKU supports active-active configuration and zone redundancy?
- VpnGw1
- VpnGw1AZ (Correct answer)
- Basic
- VpnGw2
Correct answer: VpnGw1AZ
VpnGw1AZ and higher AZ SKUs support active-active mode and are deployed across Availability Zones for resilience.
Question 2: What is the purpose of a Local Network Gateway in Azure?
- Represents the on-premises VPN device and its address space in Azure (Correct answer)
- Acts as the Azure-side endpoint for VNet peering
- Manages DNS for the VPN tunnel
- Provides NAT for on-premises traffic
Correct answer: Represents the on-premises VPN device and its address space in Azure
A Local Network Gateway is an Azure resource that represents the on-premises VPN device, including its public IP and address prefixes.
Question 3: Which VPN type should you use when you need to support multiple VNet-to-VNet and cross-premises connections with dynamic routing?
- Policy-based VPN
- Route-based VPN (Correct answer)
- Static VPN
- BGP-only VPN
Correct answer: Route-based VPN
Route-based VPNs use dynamic routing and support multiple connections, VNet-to-VNet, and BGP — required for most modern scenarios.
Question 4: What is the maximum number of Site-to-Site VPN connections supported by the VpnGw2 SKU?
- 10
- 30 (Correct answer)
- 128
- 1000
Correct answer: 30
VpnGw2 supports up to 30 Site-to-Site/VNet-to-VNet tunnels.
Question 5: Which Azure VPN feature allows branch offices to connect to each other through a hub without individual branch-to-branch tunnels?
- VNet peering transit
- Virtual WAN (Correct answer)
- VPN Gateway BGP
- ExpressRoute FastPath
Correct answer: Virtual WAN
Azure Virtual WAN provides hub-based connectivity allowing branch-to-branch communication through Microsoft's backbone without direct tunnels.
Question 6: When configuring a Point-to-Site VPN, which authentication method uses certificates stored in Azure AD?
- Certificate authentication
- RADIUS authentication
- Azure AD authentication (Correct answer)
- IKEv2 PSK
Correct answer: Azure AD authentication
Azure AD authentication for P2S VPN allows users to authenticate using their Azure AD credentials via the OpenVPN protocol.
AZ-700 VPN Gateway 1
Which Azure VPN Gateway SKU supports active-active configuration and zone redundancy?