Practice Test GeeksAZ-700 - Designing and Implementing Microsoft Azure Networking Solutions Certification Practice Test
← All AZ-700 Flashcard Decks

VPN Gateway Flashcards

6 cards from real AZ-700 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 VPN Gateway flashcards as text

  1. Which VPN Gateway feature lets you define specific traffic selectors instead of routing all traffic through the tunnel?

    Answer: Traffic selector policies on route-based VPN

    Traffic selector policies on route-based VPN gateways allow you to specify which traffic flows are protected by the IPsec tunnel.

  2. What does 'forced tunneling' accomplish in an Azure VPN configuration?

    Answer: Forces all internet-bound traffic from Azure VMs through the on-premises network

    Forced tunneling redirects all internet-bound traffic from Azure VMs back through the VPN tunnel to on-premises for inspection or compliance.

  3. Which Azure VPN Gateway SKU is NOT supported for production workloads and should only be used for dev/test?

    Answer: Basic

    The Basic SKU is a legacy gateway intended for dev/test scenarios and does not support many production features like BGP or active-active.

  4. What is the ASN Azure VPN Gateway uses by default for BGP if you do not specify a custom ASN?

    Answer: 65515

    Azure VPN Gateway uses ASN 65515 as the default BGP ASN unless a custom private ASN is configured.

  5. Which connection type between two Azure VNets does NOT require a VPN Gateway?

    Answer: VNet peering

    VNet peering connects two VNets directly over the Azure backbone without any gateway, making it lower latency and simpler.

  6. When using P2S VPN with SSTP, which operating system clients are natively supported?

    Answer: Windows only

    SSTP (Secure Socket Tunneling Protocol) is a Microsoft proprietary protocol supported natively only on Windows clients.