Exam AZ-700 topic 1 question 6 discussion

The correct answer is route based and two virtual network gateways - one for ExpressRoute connection (ExpressRoute virtual network gateway) and the second for the VPN connection (VPN virtual network gateway). Check the architecture and read the description at the source. Source: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute-vpn-failover

Routing Type: Use Route-based routing. Route-based VPNs are required for dynamic routing with BGP, which is essential for supporting failover between ExpressRoute and Site-to-Site VPN. Number of Virtual Network Gateways: You need to configure two virtual network gateways: One ExpressRoute gateway for the primary connection. One VPN gateway for the Site-to-Site VPN failover

- route based - one virtual network gateways You should configure coexistence of ExpressRoute and Site-to-Site VPN https://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal

S2S & ExpressRoute gateways are separate entities. You need to create 2 of them for this configuration as per: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager The pages also confirm that you can have only 1 gateway of each type, which strongly suggests that you cannot use one for both S2S & ExpressRoute: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways#:~:text=available%20gateway%20bandwidth.-,What%20is%20a%20virtual%20network%20gateway%3F,and%20run%20specific%20gateway%20services. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings#gwtype

The answer is Route Based and 2 Virtual Network Gateways. Both the Expressroute and VPN need distinct gateways identified by their SKU. You cannot have Expressroute on a VpnGw SKU. It must be on a dedicated ExpressRoute SKU gateway. Both VPN Gateways will exist inside the same subnet but the connection are via 2 separate gateways. This doc clearly shows the step of create 2 gateways. https://docs.microsoft.com/en-us/azure/expressroute/expressroute-howto-coexist-resource-manager Step 10: $gw = New-AzVirtualNetworkGateway -Name "ERGateway" -ResourceGroupName $resgrp.ResourceGroupName -Location $location -IpConfigurations $gwConfig -GatewayType "ExpressRoute" -GatewaySku Standard

The correct answer for me is routed based and 2. Create the site-to-site VPN gateway and local network gateway ---- https://learn.microsoft.com/en-us/azure/expressroute/how-to-configure-coexisting-gateway-portal

Expressroute GW and VPN GW are types of virtual network gateways. For co existence they carved out of GatewaySubnet (min /27). So the question asks how many virtual network gateways -- which is 2 -- one ExR and one VPN.

All Answers are incorrect. You can have Express Route and VPN on the same Virtual Network Gateway. It depends only on the SKU what you choose.

The correct answer is need route based and two virtual network gateways

in real life, we did route base and 2 virtual network gateways.

Route-based 2 virtual network gateways From ChatGPT Plus (GPT-4) For this scenario, the routing type that should be configured is "Route-based" because it allows for more flexibility in routing and is recommended for ExpressRoute connections. As for the number of virtual network gateways, you should deploy 2 virtual network gateways for redundancy and failover purposes, one for the ExpressRoute connection and another for the Site-to-Site VPN connection. This is because a virtual network gateway can only be associated with one connection at a time. So, having two virtual network gateways allows you to switch between them if one of the connections fails.

its route based but you need two VNG https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/expressroute-vpn-failover

Route based and 2 Gateways of VPN and ExpressRoute type

Route based and 2 Gateways of VPN and ExpressRoute type

Route based and 2 Gateways, as you can see in the Powershell commands to coexist $gw = New-AzVirtualNetworkGateway -Name "VPNGateway" -ResourceGroupName $gw = New-AzVirtualNetworkGateway -Name "ERGateway" -ResourceGroupName

Correct answer: You choose a Route-based when you create a VNG. Then in VNG you can add multi connection (S2S) and another one with ExpressRoute. No need to new VNG.

Correct Answer is route Based and 2 Gateway S2S gateway and ER Gateway. Though you can use the same gateway subnet for both of them.