Topic 1 · Question 105
You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. a virtual network gateway
B. a load balancer
C. an application gateway
D. a virtual network
E. a gateway subnet
Top comment
Community votes:AD · 14 (48%)AE · 12 (41%)A · 2 (7%)DE · 1 (3%)
NoNotSpam▲ 285Highly votedNovember 07, 2019 04:46 pm
If you already have Azure VMs, this implies you have a VNet already. Thus the answer should be Gateway Subnet and VNet Gateway
16 more highly voted comments
jcmoranp▲ 67Highly votedNovember 16, 2019 06:55 pm
Solutions is A and D.
ananthbhaskar▲ 33Highly votedJune 17, 2020 11:25 am
It has been mentioned that they are planning to connect On prem with Azure, so we need to consider there is no VM exist. keyword word is Planning. Answer would be Virtual Network & virtual network gateway.
richardsonbq▲ 30Highly votedNovember 12, 2019 10:55 pm
I agree with your logic. I was also wondering wether Gateway Subnet is really a resource (for me, is just a configuration). So maybe the best answer would be Virtual Netowrk Gateway and Virtual Newtwork (if not already exists)
N3rdy▲ 28Highly votedJuly 19, 2020 04:01 pm
Wrong. The plan is about client computers that are on-prem connecting to Azure VMs. You already have an Azure environment with existing VMs, to which you want to connect to. Meaning Virtual network already exists. So you need a gateway subnet and a VNET gateway.
alen995454▲ 28Highly votedDecember 11, 2019 06:05 pm
similair question from linux Academy:
Which of the following components are required to establish communication between on-premises resources and resources in Azure?
Correct Answer: A
Why is this correct?
A virtual network gateway defines the Azure network side of a site-to-site virtual private network.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
Correct Answer: D
Why is this correct?
Azure Virtual Network enables many types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the internet, and on-premises networks.
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview
Which of the following components are required to establish communication between on-premises resources and resources in Azure?
Correct Answer: A
Why is this correct?
A virtual network gateway defines the Azure network side of a site-to-site virtual private network.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways
Correct Answer: D
Why is this correct?
Azure Virtual Network enables many types of Azure resources, such as Azure Virtual Machines (VM), to securely communicate with each other, the internet, and on-premises networks.
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-overview
N3rdy▲ 28Highly votedJuly 19, 2020 04:01 pm
Wrong. The plan is about client computers that are on-prem connecting to Azure VMs. You already have an Azure environment with existing VMs, to which you want to connect to. Meaning Virtual network already exists. So you need a gateway subnet and a VNET gateway.
Moon▲ 24Highly votedNovember 24, 2019 09:27 am
I would go with "A & E".
Both are required as part of remote network connectivity. Gateway subnet, for the communication with your network
Also Virtual Network Gateway, is part of this deployment.
Both are required as part of remote network connectivity. Gateway subnet, for the communication with your network
Also Virtual Network Gateway, is part of this deployment.
examtopics6969▲ 21Highly votedJune 11, 2021 10:16 am
No, no, no - there is statement: "You have an Azure environment that contains multiple Azure virtual machines." so VNet is there already
examtopics6969▲ 21Highly votedJune 11, 2021 10:16 am
No, no, no - there is statement: "You have an Azure environment that contains multiple Azure virtual machines." so VNet is there already
Kaavie▲ 18Highly votedDecember 06, 2019 05:24 am
The right answer should be A & D due to question ask "what resource", the Gateway Subnet is not a resource ...
BomberBerru▲ 15Highly votedNovember 26, 2019 02:46 pm
The answer are correct: the first step is create a Virtual network, then create a gateway subnet because the VPN gateway use this specific subnet to specify the number of IP adress that the subnet contains.
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
foreverlearner▲ 11Highly votedApril 26, 2020 12:50 pm
Although a Gateway Subnet is required for a VPN, it is not a resource.
To establish a Site-to-Site VPN, you need to create the "Virtual Network" and "Virtual Network Gateway" Azure resource. You then define the Gateway Subnet in the resource.
https://docs.microsoft.com/en-gb/azure/vpn-gateway/create-routebased-vpn-gateway-portal
Some comments say that the Virtual Network should already exist as there are already VMs in Azure. The VN that you create is a different network, a new one for the VNG, so it has to be created.
So correct answer is "Virtual Network" and "Virtual Network Gateway"
To establish a Site-to-Site VPN, you need to create the "Virtual Network" and "Virtual Network Gateway" Azure resource. You then define the Gateway Subnet in the resource.
https://docs.microsoft.com/en-gb/azure/vpn-gateway/create-routebased-vpn-gateway-portal
Some comments say that the Virtual Network should already exist as there are already VMs in Azure. The VN that you create is a different network, a new one for the VNG, so it has to be created.
So correct answer is "Virtual Network" and "Virtual Network Gateway"
hfpb010▲ 10Highly votedDecember 07, 2019 07:47 pm
The key sentence is "You have an Azure environment that contains multiple Azure virtual machines." meaning that the VNet already exists. So A & E are correct.
troublestarterx▲ 9Highly votedMay 08, 2020 09:40 pm
A and E
You must have a VPN Gateway and a Gateway subnet
You must have a VPN Gateway and a Gateway subnet
sondrex▲ 8Highly votedMarch 07, 2020 11:26 am
correct: A & E
SiDoCiOuS▲ 7Highly votedJanuary 15, 2022 08:10 am
A and D is wrong answer. Appeared on 14-01-2022 and I failed. (I'm new here, I was preparing myself for exam on the M$ ESI site, that was a wrong choice... Outdated questions/practices...). So now I'm here to start everything from the begining...