Question
You have an Azure virtual network and an on-premises datacenter.
You are planning a Site-to-Site VPN connection between the datacenter and the virtual network.
Which two resources should you include in your plan? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. a user-defined route
- B. a virtual network gateway Correct
- C. Azure Firewall
- D. Azure Web Application Firewall (WAF)
- E. an on-premises data gateway
- F. an Azure application gateway
- G. a local network gateway Correct
Explanation
A Site-to-Site VPN needs a VPN-type virtual network gateway in the virtual network's GatewaySubnet, and a local network gateway that holds the on-premises VPN device's public IP address and address prefixes. You then create a connection between the two. A user-defined route, firewalls and an application gateway are not required. An on-premises data gateway is used by Power BI, Power Platform and Logic Apps to reach on-premises data, not to build a VPN.
