AZ-700 exam dumps

AZ-700 practice question 88 of 310

Designing and Implementing Microsoft Azure Networking Solutions. Professional level, Microsoft. Free question with the correct answer and a full explanation.

AZ-700 Question 88

Single answer

Your company needs to connect multiple on-premises locations to an Azure Virtual Network. The network team requires dynamic routing to automatically adjust routes as new subnets are added or changed in both Azure and on-premises sites. They also plan to enable BGP (Border Gateway Protocol) for more flexible route updates. Each on-premises firewall supports both policy-based and route-based configurations. Which VPN connection type should you recommend for this scenario?

  1. A

    Configure a policy-based VPN for each site to keep route management simple.

  2. B

    Use a route-based VPN with BGP enabled to allow dynamic routing for all sites.

  3. C

    Enable policy-based VPN for dynamic BGP peering between Azure and on-premises devices.

  4. D

    Mix policy-based and route-based VPN types to handle multiple sites in a single connection.

Show answer and explanation

Correct answer: B

Explanation

Azure documentation recommends using route-based VPNs when you require dynamic routing or BGP for multiple connections. Policy-based VPNs are typically limited to simpler, static routing scenarios. Refer to Microsoft's official documentation (https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpn-devices) for guidance on choosing the appropriate VPN type.

  • A. Incorrect.

    Option 1: Incorrect. Policy-based VPNs can be simpler but they do not support BGP or dynamic routing well. They rely on static routes that require more manual updates.

  • B. Correct.

    Option 2: Correct. Route-based VPNs with BGP allow dynamic route updates, making them ideal for environments with multiple sites or frequent routing changes.

  • C. Incorrect.

    Option 3: Incorrect. Policy-based VPNs do not inherently support BGP; they are typically limited to static route definitions, which contradicts the scenario� requirement for dynamic routing with BGP.

  • D. Incorrect.

    Option 4: Incorrect. Mixing policy-based and route-based VPNs can complicate the configuration. When BGP and dynamic routing are priorities, a purely route-based deployment is more effective.

Timed practice exam

Take a AZ-700 practice test under exam conditions

70 questions in 100 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam