nerdexam
Microsoft

AZ-104 · Question #353

Drag and Drop Question You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN. In Azure, you have an Azure virtual network named VNet1 that uses an address space

The correct answer is Create a gateway subnet.; Create a VPN gateway.; Create a local gateway.; Create a VPN connection.. Creating a site-to-site VPN to Azure requires four specific steps in a logical sequence: First, a gateway subnet must be created within VNet1 to host the VPN gateway (Azure requires a dedicated subnet named 'GatewaySubnet'). Next, a VPN gateway is deployed into that subnet, which

Submitted by yaw92· Mar 4, 2026Configure and manage virtual networking - specifically, implementing site-to-site VPN connections between on-premises networks and Azure Virtual Networks (AZ-104: Implement and manage virtual networking)

Question

Drag and Drop Question You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN. In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24. You need to create a site-to-site VPN to Azure. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select. Answer:

Exhibit

AZ-104 question #353 exhibit

Answer Area

Drag items

Create a local gateway.Create a VPN gateway.Create a gateway subnet.Create a custom DNS server.Create a VPN connection.Create an Azure Content Delivery Network (CDN) profile.

Correct arrangement

  • Create a gateway subnet.
  • Create a VPN gateway.
  • Create a local gateway.
  • Create a VPN connection.

Explanation

Creating a site-to-site VPN to Azure requires four specific steps in a logical sequence: First, a gateway subnet must be created within VNet1 to host the VPN gateway (Azure requires a dedicated subnet named 'GatewaySubnet'). Next, a VPN gateway is deployed into that subnet, which is the Azure-side endpoint for the VPN tunnel. Then, a local network gateway is created to represent the on-premises network (defining its public IP and address space). Finally, a VPN connection is established to link the VPN gateway and the local network gateway, completing the site-to-site tunnel. Note that creating the local network gateway and VPN gateway can be done in either order before creating the connection.

Topics

#Site-to-Site VPN#Azure VPN Gateway#Hybrid Connectivity#Azure Networking

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice