You implement Microsoft Azure ExpressRoute. You need to ensure that if the ExpressRoute connection is unavailable, you can manage the resources in Azure over a secure connection. Which two actions…

An Azure virtual network is a prerequisite for ExpressRoute and VPNs, so it should already exist, and creating a new one is not an action for enabling backup management connectivity.

Enabling a Point-to-Site VPN on the gateway is the primary action to activate the service, but the question asks for two specific actions that contribute to the solution, with D and E being the provided correct choices.

Installing the Azure VPN client is performed by the end-user on their local machine, not an action performed within Azure to configure the service.

Creating and uploading a root certificate is a necessary step for configuring certificate-based authentication for an Azure Point-to-Site VPN, which provides a secure backup connection for managing resources. This certificate validates the identity of connecting client machines.

A Point-to-Site VPN requires a defined client address pool, which is a range of private IP addresses that clients receive upon connection. This action establishes the necessary IP addressing scheme for clients to securely connect to the Azure Virtual Network.