AZ-500 Question 62
Select 2Your organization already has a site-to-site VPN connection to an Azure Virtual Network (VNet) using a VPN gateway. You want to add point-to-site VPN connectivity for remote developers, ensuring secure access and Azure Active Directory-based authentication. Which two of the following statements are correct about enabling site-to-site and point-to-site connections on the same Azure VPN gateway?
- A
You must use a RouteBased VPN gateway to support both site-to-site and point-to-site connections simultaneously.
- B
Enabling BGP routing is mandatory for all point-to-site connections in Azure.
- C
You can configure Azure AD authentication for point-to-site if you use a compatible SKU and the OpenVPN protocol.
- D
A PolicyBased VPN gateway can simultaneously support site-to-site and point-to-site connections.
Show answer and explanation
Correct answers: A, C
Explanation
To enable both site-to-site and point-to-site connections on the same Azure VPN gateway, it must be a RouteBased gateway. For additional security and integrated authentication, point-to-site can leverage Azure Active Directory when using the OpenVPN protocol on an appropriate SKU. BGP is optional for point-to-site, and PolicyBased gateways cannot simultaneously host both site-to-site and point-to-site connections. For more information, see Microsoft documentation: https://learn.microsoft.com/azure/vpn-gateway/
- A. Correct.
Correct. Azure only supports combining site-to-site and point-to-site VPNs on a RouteBased VPN gateway. Policy-based gateways do not offer this flexibility.
- B. Incorrect.
Incorrect. Border Gateway Protocol (BGP) is optional for point-to-site VPNs in Azure. BGP is commonly used for dynamic routing in complex network environments, but it is not a requirement for all point-to-site configurations.
- C. Correct.
Correct. Azure supports Azure AD authentication for point-to-site VPN when using the OpenVPN protocol on a compatible VPN gateway SKU (for example, the VpnGw1 SKU or higher).
- D. Incorrect.
Incorrect. PolicyBased VPN gateways can handle site-to-site connections under certain circumstances, but they cannot simultaneously support point-to-site connections alongside site-to-site.