AZ-700 Question 117
Select 2You are a network engineer for Contoso and need to connect a Windows Server 2019 machine in the on-premises data center to a newly created Azure Virtual Network using the Azure Network Adapter feature in Windows Admin Center. Which two of the following Azure configurations must be in place to establish a successful VPN connection?
- A
An Azure Virtual Network Gateway configured with a VPN gateway type
- B
A dedicated ExpressRoute circuit
- C
A GatewaySubnet within the target Azure Virtual Network
- D
A public load balancer deployed in front of the Azure Virtual Network
Show answer and explanation
Correct answers: A, C
Explanation
When using the Azure Network Adapter feature in Windows Admin Center, you must configure a VPN-type Azure Virtual Network Gateway and ensure a GatewaySubnet is defined in the Azure Virtual Network. These two items enable encrypted tunnels between on-premises servers and Azure. For more details, refer to Microsoft� official documentation on Azure Network Adapter at https://docs.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn-gateway and Windows Admin Center requirements.
- A. Correct.
Correct. An Azure Virtual Network Gateway (with �VPN� specified as the gateway type) is a prerequisite for the Azure Network Adapter to establish a secure tunnel. Without this gateway, the VPN connection cannot be formed.
- B. Incorrect.
Incorrect. While ExpressRoute is an alternative private connection option, it is not mandatory for an Azure Network Adapter deployment. Azure Network Adapter typically uses a site-to-site VPN, not a dedicated ExpressRoute circuit.
- C. Correct.
Correct. A GatewaySubnet is required within the Azure Virtual Network to host the VPN gateway. Without this subnet, the creation of the Azure Virtual Network Gateway is not possible, and the VPN traffic cannot be routed.
- D. Incorrect.
Incorrect. A public load balancer is not required for site-to-site VPN connectivity via Azure Network Adapter. Load balancers serve different purposes, such as distributing incoming traffic among multiple VMs, rather than facilitating VPN connections.