Question
You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network.
You need to troubleshoot what prevents you from establishing the IPsec tunnel.
Which diagnostic log should you review?
- A. IKEDiagnosticLog Correct
- B. RouteDiagnosticLog
- C. GatewayDiagnosticLog
- D. TunnelDiagnosticLog
Explanation
IKEDiagnosticLog has verbose IKE/IPsec debug logging, which shows the negotiation messages and why a tunnel fails to establish. TunnelDiagnosticLog only records when a tunnel connects or disconnects. GatewayDiagnosticLog records configuration changes and maintenance events, and RouteDiagnosticLog records static route and BGP activity.
