AZ-700 Question 133
Select 2Your organization has an existing ExpressRoute circuit with private peering established for Azure workloads. You are now asked to enable Microsoft peering so that on-premises users can access Microsoft 365 services over the same circuit. You have created a route filter that includes the required Microsoft 365 service communities. Which two additional steps must you perform to successfully enable Microsoft peering?
- A
Associate the newly created route filter with your existing ExpressRoute circuit.
- B
Provide and validate a public IP prefix that your organization owns for the BGP session.
- C
Recreate the ExpressRoute circuit using a premium SKU to support Microsoft peering.
- D
Create a separate ExpressRoute gateway and configure inbound NAT rules for Microsoft 365.
- E
Enable full Internet route advertisement on the private peering to automatically include Microsoft 365.
Show answer and explanation
Correct answers: A, B
Explanation
To configure Microsoft peering on an existing ExpressRoute circuit, you must create a route filter containing the required Microsoft 365 service communities and explicitly associate it with the circuit. You also need a valid public IP prefix for BGP to establish connectivity for global services like Microsoft 365. Additional details are available in the official ExpressRoute documentation: https://learn.microsoft.com/azure/expressroute/howto-coexist-resource-manager#enabling-microsoft-peering.
- A. Correct.
Correct. Associating the route filter that contains Microsoft 365 service communities with your existing circuit is required for Microsoft peering. Without this association, the appropriate routes for Microsoft 365 will not be advertised over the ExpressRoute circuit.
- B. Correct.
Correct. Microsoft peering requires the use of a registered public IP address range to create the BGP session for global services like Microsoft 365. Your organization must own this prefix, and it must be validated for use with Microsoft peering.
- C. Incorrect.
Incorrect. Typically, you do not need to recreate an ExpressRoute circuit or upgrade to a premium SKU solely to enable Microsoft peering. Most standard circuits can support multiple peerings (private, Microsoft, and optionally public) as long as capacity requirements are met.
- D. Incorrect.
Incorrect. You do not have to deploy a separate ExpressRoute gateway just for Microsoft peering. You can use the same gateway for multiple peerings if the circuit and the existing gateway meet your connectivity needs.
- E. Incorrect.
Incorrect. Microsoft services do not automatically use private peering if you enable full Internet route advertisement. You must specifically configure Microsoft peering with a route filter for the Microsoft 365 community. Simply enabling Internet routes on private peering will not provide access to Microsoft 365 over ExpressRoute.