Learn how to create a gateway subnet and a virtual network gateway to enable a secure VPN connection between your on-premises network and the resources that have been migrated to Azure.
Table of Contents
Question
Tradewind Traders are in the process of migrating their resources to Azure cloud services. Currently, they have several VMs deployed to their Azure subscription. Management has asked you to research how their on-premises users will be able to securely access the resources that have been migrated to Azure. Based on that research, which of the following will you need to create to implement this solution?
Select all options that apply.
A. An Application Gateway
B. A Gateway Subnet
C. A Virtual Network Gateway
D. A Load Balancer
E. A Virtual network
Answer
B. A Gateway Subnet
C. A Virtual Network Gateway
Explanation
B. A Gateway Subnet
The virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway subnet.
Note: a virtual network (answer D) is also required. However, as we already have virtual machines deployed in Azure, we can assume that the virtual network is already in place.
C. A Virtual Network Gateway
To implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines, you need to configure a VPN (Virtual Private Network) to connect the on-premises network to the Azure virtual network. The Azure VPN device is known as a Virtual Network Gateway.
The answer to the question is B. A Gateway Subnet and C. A Virtual Network Gateway. Here is why:
A gateway subnet is a special subnet within a virtual network that is used to host the virtual network gateway. A virtual network gateway is a type of virtual network gateway that enables encrypted traffic between an Azure virtual network and an on-premises network over the public internet. By creating a gateway subnet and a virtual network gateway, you can establish a secure site-to-site VPN connection between your on-premises users and the resources that have been migrated to Azure.
The other options, A. An Application Gateway, D. A Load Balancer, and E. A Virtual Network, are not correct because they do not provide a solution for securely accessing the resources that have been migrated to Azure from on-premises. An application gateway is a web traffic load balancer that operates at the application layer and provides advanced routing, security, and performance features. A load balancer is a network traffic load balancer that operates at the transport layer and distributes traffic across multiple servers. A virtual network is a logical isolation of the Azure cloud that is dedicated to your subscription. None of these options can help you create a VPN connection between your on-premises network and your Azure virtual network.
Microsoft Azure AI Fundamentals AI-900 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure AI Fundamentals AI-900 exam and earn Microsoft Azure AI Fundamentals AI-900 certification.
