AZ-700 Question 83
Single answerYour organization needs to connect 400 branch offices on-premises to an Azure VNet using site-to-site VPN tunnels. You plan to enable BGP for dynamic routing, and your expected aggregate throughput requirement is approximately 1 Gbps. Cost optimization is a high priority, and you want to choose the most appropriate VNet gateway SKU that still meets these requirements. Which SKU should you deploy?
- A
Basic
- B
VpnGw1
- C
VpnGw2
- D
VpnGw3
Show answer and explanation
Correct answer: C
Explanation
VpnGw2 is the most appropriate SKU for connecting up to 500 sites while achieving about 1 Gbps of throughput and supporting BGP for dynamic routing. This choice aligns well with common Azure best practices for balancing performance, scalability, and cost. Refer to Microsoft� documentation on �Configure a VPN gateway� and �VPN Gateway SKUs� for detailed capacity planning guidance and SKU-specific limitations.
- A. Incorrect.
Option 1 (Basic): This SKU supports a maximum of 10 site-to-site connections and does not support BGP. It also has a lower throughput limit (around 100 Mbps). Consequently, it cannot fulfill the requirements of 400 sites, 1 Gbps bandwidth, or BGP routing.
- B. Incorrect.
Option 2 (VpnGw1): Although it supports BGP, this SKU allows a maximum of 250 site-to-site connections and up to 650 Mbps throughput, falling short of the required 400 connections and approximately 1 Gbps throughput.
- C. Correct.
Option 3 (VpnGw2): This SKU supports up to 500 site-to-site connections and up to 1 Gbps of throughput. It also supports BGP for dynamic routing. This meets all specified requirements (400 sites, 1 Gbps, BGP) while remaining cost-effective compared to higher SKUs.
- D. Incorrect.
Option 4 (VpnGw3): This SKU supports up to 1000 site-to-site connections and 1.25 Gbps throughput, which exceeds your requirements. While it would work, it is not the most cost-efficient choice since VpnGw2 already satisfies the exact needs.