Learn how to create a gateway subnet and a virtual network gateway to enable a secure VPN connection between your on-premises network and the resources that have been migrated to Azure.
Question
Tradewind Traders are in the process of migrating their resources to Azure cloud services. Currently, they have several VMs deployed to their Azure subscription. Management has asked you to research how their on-premises users will be able to securely access the resources that have been migrated to Azure. Based on that research, which of the following will you need to create to implement this solution?
Select all options that apply.
A. An Application Gateway
B. A Gateway Subnet
C. A Virtual Network Gateway
D. A Load Balancer
E. A Virtual network
Answer
B. A Gateway Subnet
C. A Virtual Network Gateway
Explanation
B. A Gateway Subnet
The virtual network gateway needs to be located in a dedicated subnet in the Azure virtual network. This dedicated subnet is known as a gateway subnet.
Note: a virtual network (answer D) is also required. However, as we already have virtual machines deployed in Azure, we can assume that the virtual network is already in place.
C. A Virtual Network Gateway
To implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines, you need to configure a VPN (Virtual Private Network) to connect the on-premises network to the Azure virtual network. The Azure VPN device is known as a Virtual Network Gateway.
The answer to the question is B. A Gateway Subnet and C. A Virtual Network Gateway. Here is why:
A gateway subnet is a special subnet within a virtual network that is used to host the virtual network gateway. A virtual network gateway is a type of virtual network gateway that enables encrypted traffic between an Azure virtual network and an on-premises network over the public internet. By creating a gateway subnet and a virtual network gateway, you can establish a secure site-to-site VPN connection between your on-premises users and the resources that have been migrated to Azure.
The other options, A. An Application Gateway, D. A Load Balancer, and E. A Virtual Network, are not correct because they do not provide a solution for securely accessing the resources that have been migrated to Azure from on-premises. An application gateway is a web traffic load balancer that operates at the application layer and provides advanced routing, security, and performance features. A load balancer is a network traffic load balancer that operates at the transport layer and distributes traffic across multiple servers. A virtual network is a logical isolation of the Azure cloud that is dedicated to your subscription. None of these options can help you create a VPN connection between your on-premises network and your Azure virtual network.
Microsoft Azure AI Fundamentals AI-900 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure AI Fundamentals AI-900 exam and earn Microsoft Azure AI Fundamentals AI-900 certification.
Alex Lim
Alex Lim is a certified IT Technical Support Architect with over 15 years of experience in designing, implementing, and troubleshooting complex IT systems and networks. He has worked for leading IT companies, such as Microsoft, IBM, and Cisco, providing technical support and solutions to clients across various industries and sectors. Alex has a bachelor’s degree in computer science from the National University of Singapore and a master’s degree in information security from the Massachusetts Institute of Technology. He is also the author of several best-selling books on IT technical support, such as The IT Technical Support Handbook and Troubleshooting IT Systems and Networks. Alex lives in Bandar, Johore, Malaysia with his wife and two chilrdren. You can reach him at [email protected] or follow him on Website | Twitter | Facebook
