Exam AZ-700 topic 9 question 2 discussion

On the peering from VNet1, select Allow forwarded traffic: • This would allow traffic to be forwarded between peered VNets, but it doesn’t directly address the issue of connecting VNet2 and VNet3 through a gateway. It’s useful for other use cases like enabling traffic from VMs across VNet peering, but not directly applicable for enabling gateway transit.

Maybe they have changed the settings name or they are referring to a so-called 'gateway transit'. Again, Microsoft makes a lot of confusion with the exam questions. There is no gateway transit as a settings now, you can check below, so the right ones are B and E in my opinion. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit

Allow gateway transit is not applicable on vnet1 peering. There is no hub here.

Looks like that question could be old. https://azure.microsoft.com/fr-fr/blog/create-a-transit-vnet-using-vnet-peering/ In that blog we can see the option "allow gateway transit" on hub-to-spoke peering.

AB To use virtual network peerings, in the virtual network Peering setup: - Configure the peering connection in the hub to Allow gateway transit. - Configure the peering connection in each spoke to Use the remote virtual network's gateway. - Configure all peering connections to Allow forwarded traffic. https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke?tabs=cli#spoke-connections-to-remote-networks-through-a-hub-gateway

- If you consider that all the steps are being performed on the portal, there is no "Allow Gateway Transit" to be "Selected" as described in the article below: https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit#to-add-a-peering-and-enable-transit - If you consider all the steps are being performed in PowerShell, using "Add-AzVirtualNetworkPeering" command, so, you have the attribute "-AllowGatewayTransit" to be "Set" not "Selected", since its a boolean option. https://learn.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-peering-gateway-transit#ps-same

You cannot select Gateway transit on peering on vnet1 - only allow traffic forwarded from remote virtual network

In exam Feb, 2023

AB correct however from peering perspective .. There is no mention of FW/RouteServer/NVA in the Vnet 1...so assume the VNET2 and VNET3 will learn the route from the GW

There's no option "gateway transit." in the peering configuration. Three's only "traffic forwarded from remote virtual network"

The sentence should be modified without creating confusion

vnets 2 and 3 need to peer with vnet1.

A and B are the correct answer

There is no such thing as gateway transit option in VPC peering gateway transit is the feature