AZ-700 Question 135
Select 3Your company has set up a new ExpressRoute circuit in the Azure portal and now wants to establish private connectivity between its on-premises data center and an Azure virtual network (VNet). Which of the following actions are required to properly create and configure an ExpressRoute gateway and link the circuit to the VNet?
- A
Create a dedicated GatewaySubnet in the target virtual network.
- B
Deploy a Virtual Network Gateway resource with the 'ExpressRoute' gateway type.
- C
Associate the ExpressRoute circuit to an Azure route table for automatic prefix advertisement.
- D
Provision a Local Network Gateway resource and associate it with the ExpressRoute circuit.
- E
Link the ExpressRoute circuit to the VNet through the gateway connection in the Azure portal.
Show answer and explanation
Correct answers: A, B, E
Explanation
To set up an ExpressRoute gateway, you must create a GatewaySubnet in your VNet and then deploy a Virtual Network Gateway using the 'ExpressRoute' gateway type. Once the gateway is in place, you use the Azure portal to connect the existing ExpressRoute circuit to that gateway. This approach provides private connectivity between on-premises networks and Azure resources, leveraging BGP for routing. For additional details, refer to official Microsoft documentation on configuring ExpressRoute gateways: https://learn.microsoft.com/azure/expressroute/howto-point-to-site-expressroute.
- A. Correct.
Correct � You must create a GatewaySubnet in the VNet to host the ExpressRoute gateway. Azure uses this special subnet for gateway services.
- B. Correct.
Correct � The Virtual Network Gateway must be created with the 'ExpressRoute' type (not VPN) so it can integrate with the ExpressRoute circuit.
- C. Incorrect.
Incorrect � You do not directly associate an ExpressRoute circuit with an Azure route table for prefix advertisement. Instead, routing is handled through the ExpressRoute configuration and BGP settings, not by directly attaching the circuit to a route table.
- D. Incorrect.
Incorrect � A Local Network Gateway resource is used for site-to-site VPN connections. This is not required for ExpressRoute, which uses a different approach for connectivity and routing.
- E. Correct.
Correct � After you have deployed the ExpressRoute gateway, you must link (or 'connect') the ExpressRoute circuit to the VNet via the gateway in the Azure portal. This final step establishes the connection between on-premises and Azure.