AZ-700 Question 118
Select 2Your organization wants to establish a secure point-to-site (P2S) VPN connection from an on-premises Windows Server 2019 Datacenter machine to an Azure Virtual Network using the Azure Network Adapter feature in Windows Admin Center. During the planning phase, you need to confirm all Azure-related requirements. Which two of the following requirements must you have in place before configuring the Azure Network Adapter?
- A
The Windows Server must be joined to Azure Active Directory (Azure AD)
- B
An existing Azure subscription with permission to create or manage a Virtual Network Gateway
- C
A Windows Server 2016 or later machine running Windows Admin Center (version 1904 or above)
- D
A Standard Load Balancer deployed in the same region as the Azure Virtual Network
Show answer and explanation
Correct answers: B, C
Explanation
When using Windows Admin Center to configure Azure Network Adapter for a point-to-site VPN, you need (1) a Windows Server 2016 or later system that is running Windows Admin Center 1904 or above and (2) an Azure environment with a Virtual Network Gateway or the ability to provision one. These prerequisites are documented in Microsoft's guidance for deploying Azure Network Adapter via Windows Admin Center. Joining to Azure AD or deploying a load balancer are not mandatory for this VPN configuration.
- A. Incorrect.
Incorrect. While Azure AD join could be beneficial in other scenarios, it is not a strict requirement for configuring the Azure Network Adapter. You only need a valid Azure subscription and network prerequisites. Domain membership or Azure AD join is not mandatory for creating the P2S VPN through Azure Network Adapter.
- B. Correct.
Correct. To use Azure Network Adapter for a P2S connection, you must have an Azure subscription in which you can create or manage a Virtual Network Gateway (or have one already available). This is essential for establishing the VPN tunnel to Azure.
- C. Correct.
Correct. The on-premises server must be running a supported version of Windows Server (2016 or later) alongside Windows Admin Center 1904 or higher. Windows Admin Center is the interface that provides the Azure Network Adapter feature and automates the setup process.
- D. Incorrect.
Incorrect. A Standard Load Balancer is not a requirement for setting up a P2S VPN with Azure Network Adapter. A load balancer is used for distributing traffic across multiple VMs or services, not for establishing a point-to-site VPN connection.