AZ-700 Question 154
Select 2You have an existing Azure Virtual WAN named ContosoVWAN in the East US region, which has a virtual hub named EastUSHUB with address space 10.0.0.0/16. You want to create a second hub named WestUSHUB in the West US region to connect two new VNets (10.1.0.0/24 and 10.2.0.0/24) and enable Site-to-Site (S2S) VPN connectivity for on-premises networks. Which two actions must you take to successfully create and configure the WestUSHUB?
- A
Assign WestUSHUB a dedicated non-overlapping address space distinct from EastUSHUB and the new VNets.
- B
Use the same address space as EastUSHUB to simplify routing between the two hubs.
- C
Enable a VPN gateway in WestUSHUB for Site-to-Site connectivity to on-premises networks.
- D
Place WestUSHUB in the exact same resource group and region as EastUSHUB.
Show answer and explanation
Correct answers: A, C
Explanation
When creating a new hub in Azure Virtual WAN, you must assign a unique address space and enable the appropriate gateway (VPN, ExpressRoute, or both) to meet connectivity requirements. Overlapping address spaces or neglecting to enable a VPN gateway will prevent successful on-premises integration. For more details, refer to Microsoft� official Azure Virtual WAN documentation (https://learn.microsoft.com/azure/virtual-wan/).
- A. Correct.
Correct. Each hub requires its own non-overlapping address space that does not conflict with connected VNets or other hubs. Overlapping address spaces can cause routing and connectivity issues.
- B. Incorrect.
Incorrect. Hubs must have unique address spaces. Reusing the same address space would cause IP conflicts and routing complications between hubs and VNets.
- C. Correct.
Correct. To allow S2S VPN connections, you must enable and configure the VPN gateway in the new hub. Without a VPN gateway, S2S tunnels to on-premises networks cannot be established.
- D. Incorrect.
Incorrect. A hub can be placed in a different region and resource group from the existing hub. The location is chosen based on design needs (e.g., redundancy, latency), and there is no requirement to deploy all hubs in the same region or resource group.