Learn about the key features and benefits of policy-based VPN gateways in Azure, such as compatibility with legacy on-premises VPN devices and use of static routing.
Table of Contents
Question
Tradewind Traders is planning to migrate to Azure cloud services however management has asked you to research Policy-based VPN gateways. In your research, you learn that Policy-based VPN Gateways evaluate all data packets against sets of IP addresses to determine the tunnel that the packet is going to be sent through. Which of the following are key features of policy-based VPN gateways in Azure?
Select all options that apply.
A. Compatibility with legacy on-premises VPN devices
B. Use of static routing
C. Support for IKEv2
D. Dynamic routing protocols
Answer
A. Compatibility with legacy on-premises VPN devices
B. Use of static routing
Explanation
Combinations of address prefixes from both networks control how traffic is encrypted and decrypted through the VPN tunnel. The source and destination of the tunneled networks are declared in the policy and don’t need to be declared in routing tables.
The correct answer is A and B. Policy-based VPN gateways in Azure are compatible with legacy on-premises VPN devices that use policy-based (static-routing) VPNs. Policy-based VPN gateways specify statically the IP address of packets that should be encrypted through each tunnel. This type of device evaluates every data packet against those sets of IP addresses to choose the tunnel where that packet is going to be sent through. Policy-based VPN gateways do not support IKEv2, dynamic routing protocols, or route-based VPN gateways.
Microsoft Azure AI Fundamentals AI-900 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft Azure AI Fundamentals AI-900 exam and earn Microsoft Azure AI Fundamentals AI-900 certification.
