AZ-700 Question 102
Single answerA research company plans a point-to-site (P2S) VPN deployment to provide remote developers secure access to Azure resources. They expect about 300 concurrent connections at peak load, must use Azure AD authentication, and want to avoid unnecessary cost. Which Gateway SKU should you recommend?
- A
Basic
- B
VpnGw1
- C
VpnGw2
- D
VpnGw3
Show answer and explanation
Correct answer: C
Explanation
For point-to-site VPN solutions, each VpnGw SKU has different capacity limits for concurrent connections and supports different authentication methods. Basic is limited to 128 connections and does not support Azure AD. VpnGw1 supports up to 250 connections, which is insufficient for 300 concurrent users. VpnGw2 supports up to 500 connections and includes Azure AD support, meeting both capacity and authentication needs cost-effectively. VpnGw3 provides higher throughput and capacity of up to 1,000 connections but would be more expensive without a matching requirement for that higher capacity. For more details, see Microsoft� documentation: https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings
- A. Incorrect.
Incorrect. The Basic SKU supports a maximum of 128 point-to-site connections, which is insufficient for the 300 connections required. Additionally, it does not support Azure AD authentication.
- B. Incorrect.
Incorrect. Although VpnGw1 supports Azure AD authentication, it only provides up to 250 concurrent point-to-site connections, which does not meet the 300 connection requirement.
- C. Correct.
Correct. VpnGw2 supports up to 500 concurrent point-to-site connections and Azure AD authentication, making it suitable for 300 concurrent connections while remaining cost-efficient compared to higher SKUs.
- D. Incorrect.
Incorrect. VpnGw3 supports up to 1,000 concurrent connections, which is more than needed. It would work but is not the most cost-effective choice given the 300-connection requirement.