Exam AZ-104 topic 5 question 149 discussion

To configure access for users on the on-premises network to connect to a virtual machine on VNet2 while minimizing costs, you should use B. service chaining and user-defined routes (UDRs). Here’s how you can achieve this: User-Defined Routes (UDRs): Create a UDR in VNet1 that directs traffic destined for VNet2 to the VPN gateway. This ensures that traffic from the on-premises network to VNet2 flows through the VPN gateway of VNet1. Service Chaining: Enable service chaining on the VPN gateway in VNet1. Service chaining allows the VPN gateway to forward traffic to other services (such as Azure Firewall or Azure Application Gateway) before reaching its final destination. In this case, configure the VPN gateway to forward traffic to VNet2 through the UDR. By combining UDRs and service chaining, you can achieve connectivity between the on-premises network and the virtual machine on VNet2 while minimizing costs.

Here Service Chaining refers to "enable Gateway transit" in vNet1 peering and "allow remote Gateway" in vNet2 peering. The UDR route table is installed in vNet2 which direct the response to the request from on-premise network to the Gateway then reach on-premise network.

B traffic sourced from on-premise network -> VPN Gateway configured in vNet1 -> UDR which is hosted in the Route Table which is associated with the subnet of VPN Gateway -> VPN Gateway configured in vNet1 ->(via service chaining configured in VPN Gateway) -> vNet2

B is correct

Is correct