AZ-700 Question 94
Select 2You are implementing connectivity between your on-premises datacenter and Azure for the Contoso organization. You have created a virtual network (named ContosoVNet) in the East US region with the address space 10.1.0.0/16 and reserved a dedicated GatewaySubnet using the 10.1.255.0/27 prefix. Your goal is to set up a site-to-site VPN gateway that can be upgraded later to support ExpressRoute with minimal changes. Which of the following steps must you perform to create and configure the virtual network gateway? (Choose two.)
- A
- Configure the virtual network gateway type as �VPN� with VPN type �PolicyBased� for better vendor compatibility
- B
- Specify the VPN type as �RouteBased� and select the VpnGw1 SKU to keep costs reasonable while allowing future expansions
- C
- Use a larger subnet, such as a /26, for the GatewaySubnet to improve VPN gateway performance
- D
- Enable BGP on the VPN gateway configuration to allow dynamic route exchanges for future ExpressRoute connectivity
Show answer and explanation
Correct answers: B, D
Explanation
When creating a virtual network gateway for hybrid connectivity and potential future integration with ExpressRoute, you must configure a route-based VPN gateway. Policy-based VPN gateways do not support many advanced features such as BGP and ExpressRoute connectivity. Selecting the VpnGw1 SKU provides a reasonable balance of cost and performance. Enabling BGP allows dynamic route exchange between Azure and on-premises devices. For more details, refer to Microsoft documentation on Virtual Network Gateway configuration (https://learn.microsoft.com/azure/vpn-gateway/vpn-gateway-about-vpngateways).
- A. Incorrect.
Option 1: Incorrect. For future connectivity including ExpressRoute, a route-based gateway is required. Policy-based gateways have limited expansion options and are generally not recommended for new deployments.
- B. Correct.
Option 2: Correct. A route-based VPN type is necessary if you plan to upgrade to support ExpressRoute or other advanced routing features. The VpnGw1 SKU is a cost-effective choice for typical workloads and offers the necessary flexibility for expansion.
- C. Incorrect.
Option 3: Incorrect. While the GatewaySubnet must be a dedicated subnet labeled �GatewaySubnet,� there is no strict requirement to use a /26 just for performance. A /27 is often sufficient unless you anticipate a large number of connections or routing requirements that would exceed the capacity of the chosen prefix.
- D. Correct.
Option 4: Correct. Enabling BGP allows dynamic route advertisement, which is essential if you plan to integrate with ExpressRoute or have complex routing needs. This simplifies expansion and route management in hybrid scenarios.