AZ-700 Question 84
Single answerYour company needs to connect 25 remote branch offices to a single Azure VNet using site-to-site VPN tunnels. The estimated bandwidth requirement for these connections is around 500 Mbps, and you want to optimize for cost while meeting these performance needs. Which VNet gateway SKU should you select?
- A
Basic SKU
- B
VpnGw1
- C
VpnGw2
- D
VpnGw4
Show answer and explanation
Correct answer: B
Explanation
When choosing a VNet gateway SKU for site-to-site VPN, you should consider both the number of tunnels required and the bandwidth requirements. VpnGw1 supports up to 30 tunnels and provides sufficient throughput (up to 650 Mbps), making it the most cost-efficient option for 25 site-to-site connections requiring 500 Mbps. Refer to Microsoft documentation for updated throughput limits and recommended best practices (https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn-gateway-settings).
- A. Incorrect.
Basic SKU is limited to a maximum of 10 IPsec/IKE tunnels and provides lower performance (up to 100 Mbps), making it unsuitable for the stated requirements of 25 connections and 500 Mbps throughput.
- B. Correct.
VpnGw1 supports up to 30 site-to-site VPN tunnels and provides up to 650 Mbps of throughput, which meets both the connection count and performance requirements while remaining cost-effective. This is the correct choice.
- C. Incorrect.
VpnGw2 does support up to 30 site-to-site tunnels and offers higher throughput (up to 1 Gbps), but it is more expensive than VpnGw1. Although it would work, it is not the most cost-effective for the stated 500 Mbps throughput requirement.
- D. Incorrect.
VpnGw4 provides up to 50 site-to-site tunnels and up to 5 Gbps of throughput, which is well above the requirements. It would also be significantly more expensive, making it an unnecessary upgrade for this scenario.