Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the AZ-800 exam with our comprehensive practice quiz. Test your knowledge with multiple-choice questions and detailed explanations. Enhance your skills in Windows Server Hybrid Core Infrastructure to excel in your certification exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which feature must be configured for Azure VPN to enable site-to-site connectivity?

  1. Gateway subnet

  2. Network Security Group

  3. Public IP address

  4. Private Endpoint

The correct answer is: Gateway subnet

To enable site-to-site connectivity with Azure VPN, configuring a gateway subnet is essential. The gateway subnet is a specific range of IP addresses within a virtual network designed specifically for the VPN gateway. It is crucial because the VPN gateway needs a dedicated subnet to operate effectively; without this, it would not be able to properly establish the connection between the on-premises network and the Azure virtual network. When a gateway subnet is defined, it allows for adequate routing and management of traffic, ensuring that data can flow securely between the two environments. The gateway subnet provides the necessary resources and mechanisms for the establishment of VPN tunnels, facilitating seamless site-to-site connections. While other features like Network Security Groups, public IP addresses, and private endpoints play important roles within the Azure environment, they do not directly enable site-to-site VPN connectivity in the same way that a gateway subnet does. A public IP address is typical for the VPN gateway and is inherently needed for the connection, but it is the configuration of the gateway subnet that specifically allows the VPN to function.