nerdexam
Microsoft

AZ-104 · Question #544

You plan to deploy route-based Site-to-Site VPN connections between several on-premises locations and an Azure virtual network. Which tunneling protocol should you use?

The correct answer is B. IKEv2. A Site-to-Site (S2S) VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. IKEv2 supports 10 S2S connections, while IKEv1 only supports 1…

Submitted by diego_uy· Mar 4, 2026Configure and manage virtual networking

Question

You plan to deploy route-based Site-to-Site VPN connections between several on-premises locations and an Azure virtual network. Which tunneling protocol should you use?

Options

  • AL2TP
  • BIKEv2
  • CPPTP
  • DIKEv1

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    92% (35)
  • C
    5% (2)

Explanation

A Site-to-Site (S2S) VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. IKEv2 supports 10 S2S connections, while IKEv1 only supports 1. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-classic-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice