Exam AZ-104 topic 5 question 27 discussion

The answers are in order and are correct. Always work from the Azure side first, it's a dependency. Dependency is the key to all order obviously... 1 - Start with a Gateway subnet. You need the subnet in place first before you can associate a VPN gateway with it, which is what is created next. 2 - Create a VPN gateway. Associate the VPN gateway with the gateway subnet you created (there are other steps but for the sake of what is available for answers, the prem side is now configured) Now for the premice side. 3. Create a local gateway. You need the local gateway in order to complete the tunnel, then you can create a VPN connection

Correct Answer: As per documentation: 1. Create a virtual network 2. Create a VPN gateway 3. Create a local network gateway 4. Create a VPN connection 5. Verify the connection 6. Connect to a virtual machine Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-classic-portal

Create a Gateway subnet and associate a VPN gateway with it. Configure the prem side and proceed with the premice side.

The answers are correct, starting from the Azure side first. Start with a Gateway subnet, create a VPN gateway, and create a local gateway for the VPN connection. The local gateway is necessary for completing the tunnel and establishing a VPN connection. Dependency is key.

CORRECT

Given answer is correct

1. Create a gateway subnet 2. Create a VPN gateway 3. Create a local network gateway 4. Create a VPN connection

The correct order of actions to create a site-to-site VPN to Azure from an on-premises network is as follows: Create a local network gateway in Azure that represents the on-premises network, specify the public IP address of the VPN device, and define the address space of the on-premises network. Create a VPN gateway in Azure and configure the gateway type, VPN type, and SKU. Create a gateway subnet in VNet1 to host the VPN gateway. Create a VPN connection between the on-premises VPN device and the Azure VPN gateway, specify the shared key, and select the local network gateway and the VPN gateway. Note: Creating a custom DNS server is not necessary for creating a site-to-site VPN connection.

The correct order of actions to create a site-to-site VPN to Azure from an on-premises network is as follows: Create a local network gateway in Azure that represents the on-premises network, specify the public IP address of the VPN device, and define the address space of the on-premises network. Create a VPN gateway in Azure and configure the gateway type, VPN type, and SKU. Create a connection between the on-premises VPN device and the Azure VPN gateway, specify the shared key, and select the local network gateway and the VPN gateway. Configure the on-premises VPN device to connect to the Azure VPN gateway, specify the public IP address of the Azure VPN gateway, and configure the necessary settings, such as the authentication method, encryption algorithm, and IKE version

create gateway subnet part of creating vpn gateway create virtual network gateway / vpn gatewat create local gw create vpn connection

Answers are in order and are Correct, more info: https://learn.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

Given Answer is Correct 1. Gateway subnet 2. VPN Gateway 3. Local Gateway 4. Create VPN Connection

The answers are in order and are correct.

The requirements are as per below Create a virtual network ***( That is the Gateway Subnet)*** Create a VPN gateway, A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet Create a local network gateway ** The purpose for this GW is to have replica information about the on-prem VPN GW and provides it to the Azure VPN GW*** such info is Public IP and the private IP address pool. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway. Create a VPN connection, The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic Verify the connection Connect to a virtual machine

1. Gateway subnet 2. VPN Gateway 3. Local Network Gateway 4. Create VPN Connection

on exam 13/3/2022

Creating the gateway subnet is not mandatory, because if you go straight to create the VPN gateway and you have not previously created the gateway subnet, Azure suggests a range for creating the gateway subnet on the fly along with VPN gateway creation... But as the questions requires 4 responses, and there are 2 that does not make sense, so creating a gateway subnet is the first in order, and the following 3 are OK, so answer is correct :-)