Discover the optimal Azure VPN Gateway SKU for a Site-to-Site (S2S) VPN with 1 Gbps throughput and minimal cost. Detailed explanation and analysis for the AZ-500 certification exam.
Table of Contents
Question
You have an on-premises network.
You have an Azure subscription that contains the resources shown in the following table.
| Name | Description |
|---|---|
| VNet1 | Virtual network |
| ER1 | ExpressRoute circuit that links the on-premises network to VNet1 |
You plan to deploy a Site-to-Site (S2S) VPN between the on-premises network and VNet1.
You need to recommend an Azure VPN Gateway SKU that meets the following requirements:
- Supports 1-Gbps throughput
- Minimizes costs
What should you recommend?
A. VpnGw1
B. VpnGw2
C. VpnGw1AZ
D. VpnGw2AZ
Answer
The best Azure VPN Gateway SKU to recommend based on the requirements of 1 Gbps throughput and minimizing costs is:
A. VpnGw1
Explanation
The VpnGw1 SKU supports a maximum throughput of 650 Mbps and up to 30 S2S tunnels. While it doesn’t quite meet the 1 Gbps throughput requirement, it is the lowest cost option of the available choices that comes closest to the desired throughput.
VpnGw2 supports up to 1.25 Gbps, which exceeds the 1 Gbps requirement, but it is more expensive than VpnGw1. Since minimizing cost is also a key requirement, VpnGw1 is a better choice.
The AZ SKUs (VpnGw1AZ and VpnGw2AZ) provide zone-redundant gateways for higher availability, but at a significantly higher cost than the non-AZ SKUs. They are not necessary to meet the stated throughput and cost requirements.
Therefore, VpnGw1 provides the best balance of meeting the 1 Gbps throughput goal as closely as possible while minimizing the cost. It is the optimal choice given the requirements and constraints in the question.
Microsoft Certified Azure Security Engineer Associate AZ-500 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Certified Azure Security Engineer Associate AZ-500 exam and earn Microsoft Certified Azure Security Engineer Associate AZ-500 certification.