Question
You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN.
Users will authenticate by an on-premises Active Directory domain.
Which additional service should you deploy to support the VPN authentication?
- A. an Azure key vault
- B. a RADIUS server Correct
- C. a certification authority
- D. Microsoft Entra application proxy
Explanation
P2S authentication with Active Directory domain credentials requires a RADIUS server that integrates with the AD domain controllers. The VPN gateway passes authentication messages between the client and the RADIUS server, which can run on-premises or in Azure. OpenVPN supports RADIUS authentication. A certification authority is for certificate authentication, not domain credentials, and Key Vault and Microsoft Entra application proxy play no part in P2S VPN authentication.
