Question
You have an Azure subscription that contains a single virtual network and a virtual network gateway.
You need to ensure that administrators can use Point-to-Site (P2S) VPN connections to access resources in the virtual network. The connections must be authenticated by Microsoft Entra ID (formerly Azure Active Directory).
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
For the Microsoft Entra ID configuration, the gateway authenticates users through the Azure VPN Client application, which exists in the tenant as an enterprise application (for the manually registered client you grant admin consent to it; the newer Microsoft-registered client app ID needs no manual registration). An access package or a Conditional Access policy can govern access but do not enable Entra authentication, and a VPN certificate is used for certificate authentication, not Entra ID. For the P2S VPN tunnel type, Microsoft Entra ID authentication is supported only with the OpenVPN (SSL) protocol, so IKEv2, SSTP or the IKEv2 and SSTP combination cannot be used.
