Exam AZ-900 topic 1 question 105 discussion

If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway

Solutions is A and D.

i agree with A and E as vnet should already be present

AE. While A (a virtual network gateway) and D (a virtual network) are both important components in Azure networking, they don’t fully address the requirement to enable communication between on-premises client computers and Azure virtual machines. Here’s why: A virtual network gateway (A): This is essential for establishing a secure connection between your on-premises network and your Azure virtual network. It facilitates encrypted traffic flow between the two networks. A virtual network (D): This is necessary to create a private network in Azure where your virtual machines reside. However, it alone does not enable communication between on-premises and Azure. To complete the solution, you also need a gateway subnet (E).

On Exam Jun/24

A & E are correct. To enable client computers on your on-premises network to communicate with Azure virtual machines, you typically need to set up a VPN connection between your on-premises network and the Azure virtual network. The correct Azure resources to include in this scenario are: A. a virtual network gateway E. a gateway subnet

Le due risorse di Azure che dovresti includere nella raccomandazione sono: A. Un gateway di rete virtuale: Questa risorsa consente di stabilire una connessione sicura e privata tra la rete locale e la rete virtuale in Azure. Il gateway di rete virtuale consente la comunicazione bidirezionale tra i computer client nella rete locale e le macchine virtuali di Azure. D. Una rete virtuale: Questa risorsa definisce l'ambiente di rete isolato in Azure in cui risiedono le macchine virtuali. È necessario creare una rete virtuale per ospitare le macchine virtuali di Azure e stabilire la connessione con la rete locale tramite il gateway di rete virtuale. Bilanciatore del carico (risposta B) e sottorete del gateway (risposta E) non sono necessari per consentire la comunicazione tra i computer client nella rete locale e le macchine virtuali di Azure in questo scenario.

A and E Azure Virtual network is already present as soon as you create a VM: https://learn.microsoft.com/en-us/azure/virtual-network/network-overview "When you create a virtual machine (VM), you create a virtual network or use an existing one." You NEED a gateway subnet to connect the virtual network to another network: https://learn.microsoft.com/en-us/archive/blogs/solutions_advisory_board/calculating-the-gateway-subnet-address-space-for-azure-virtual-networks "A virtual network (VNet) in Azure infrastructure services that is connected to other networks must have a gateway subnet" Tricky wording as always with these exams.

The correct answers are: A. a virtual network gateway D. a virtual network Explanation: Virtual Network Gateway (A): This gateway enables secure connections between your on-premises network and the Azure virtual network. It acts as a VPN gateway for routing traffic. Virtual Network (D): A virtual network is required to host the Azure virtual machines and provide the network environment for communication. It's where you define the address space and subnets for your Azure resources.

E. a gateway subnet is often associated with the virtual network gateway, it’s not a separate resource but rather a dedicated subnet within the virtual network to host the virtual network gateway. It’s a necessary component for the gateway to function but not a separate resource to be created.

Answer is A + D according to ChatGPT.

pasting this question in any of the strong ai generators (chatGPT, Bard, Bing Copilot): "You have an Azure environment that contains multiple Azure virtual machines. You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines. You need to recommend which Azure resources must be created for the planned solution. Which two Azure resources should you include in the recommendation?" The output is always the same: 1. Virtual Network Gateway (VNet Gateway) 2. Virtual Network (VNet)

A virtual network can have two virtual network gateways; one VPN gateway and one ExpressRoute gateway. On the other hand, a virtual network gateway is composed of two or more Azure-managed VMs that are automatically configured and deployed to a specific subnet you create called the GatewaySubnet, so a gateway subnet is not a service. Then the only two valid options left are a virtual network gateway (in this case a VPN gateway) and a virtual network (VNet). Reference: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

For enabling communication between client computers on your on-premises network and Azure virtual machines, you would typically use a Virtual Network Gateway. Additionally, you would need a Virtual Network to connect your Azure virtual machines. Therefore, the recommended Azure resources for the planned solution are: A. a virtual network gateway D. a virtual network

Is 'gateway subnet' even a resource? I don't think so

This showed up today. Had 36 questions and scored an 857, and the questions here were all covered on the test! I did answer this one correctly.

Correct ans: AD ChatGPT confirmed