AZ-700 Question 98
Select 2You have a legacy application that must continue using an on-premises IP address during its migration to Azure. You already established a site-to-site VPN between the on-premises datacenter and Azure. You plan to implement Azure Extended Network so that the Azure VM hosting the application can retain the same on-premises IP address. Which two configurations are required on the Azure side to enable the VM to use the on-premises IP address?
- A
A. Enable IP forwarding on the VM� Azure network interface
- B
B. Assign a static DNS server pointing to your on-premises DNS
- C
C. Add a secondary IP configuration on the VM� network interface with the on-premises IP address
- D
D. Enable forced tunneling at the Azure virtual network level
Show answer and explanation
Correct answers: A, C
Explanation
In Azure Extended Network scenarios, the VM in Azure must maintain its on-premises IP address as a secondary configuration to preserve network identity. Enabling IP forwarding allows the VM to handle traffic destined for that on-premises IP. DNS configuration and forced tunneling can be part of an overall network strategy, but they are not required to extendedly use the on-premises IP address. Refer to Microsoft� documentation on Azure Extended Network for step-by-step guidance on assigning the secondary IP configuration and enabling IP forwarding.
- A. Correct.
A. Enable IP forwarding on the VM� Azure network interface: Correct. Azure Extended Network requires IP forwarding to be enabled so inbound packets for the on-prem IP address can be forwarded to the VM on Azure. Without IP forwarding, the VM would drop traffic that doesn�t match the primary address in Azure.
- B. Incorrect.
B. Assign a static DNS server pointing to your on-premises DNS: Incorrect. While configuring DNS to resolve on-premises services can be useful, it does not enable the VM to retain the on-premises IP address, which is the central requirement of Azure Extended Network.
- C. Correct.
C. Add a secondary IP configuration on the VM� network interface with the on-premises IP address: Correct. Azure Extended Network relies on assigning the on-prem address as a secondary IP configuration. The VM can then communicate using both the Azure-assigned IP and the on-prem IP over the existing VPN tunnel.
- D. Incorrect.
D. Enable forced tunneling at the Azure virtual network level: Incorrect. Forced tunneling routes all outbound traffic from Azure back through on-premises. It does not address the need to retain and advertise the on-premises IP address on the VM.