nerdexam
Microsoft

AZ-104 · Question #812

Drag and Drop Question You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains virtual machines that have Remote Desktop enabled. Several users plan to work…

The correct answer is Create a new subnet in VNet1.; Add an IP address pool.; Create a VPN gateway. To configure a Point-to-Site VPN, you must first create a dedicated GatewaySubnet within VNet1 (the 'new subnet' referenced), then create a VPN Gateway in that subnet to handle encrypted tunnel termination, and finally configure an IP address pool (the client address pool) that…

Submitted by kwame.gh· Mar 4, 2026Configure and manage virtual networking - specifically implementing secure remote access using Azure VPN Gateway Point-to-Site connections (AZ-104 / Azure Administrator)

Question

Drag and Drop Question You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains virtual machines that have Remote Desktop enabled. Several users plan to work remotely and connect to the virtual machines from a home office. You need to configure connectivity to the virtual machines to support a Point-to-Site (P2S) VPN connection for each user. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibit

AZ-104 question #812 exhibit

Answer Area

Drag items

Create a new subnet in VNet1.Add a public IP address to each virtual machine.Deploy a load balancer to VNet1.Add an IP address pool.Create a local network gateway.Create a VPN gateway.

Correct arrangement

  • Create a new subnet in VNet1.
  • Add an IP address pool.
  • Create a VPN gateway.

Explanation

To configure a Point-to-Site VPN, you must first create a dedicated GatewaySubnet within VNet1 (the 'new subnet' referenced), then create a VPN Gateway in that subnet to handle encrypted tunnel termination, and finally configure an IP address pool (the client address pool) that assigns IP addresses to connecting remote users. These three steps are the core requirements for a functional P2S VPN configuration in Azure, performed in this specific sequence because the gateway requires the subnet to exist first, and the IP pool is configured as part of the gateway setup.

Topics

#Point-to-Site VPN#Azure VPN Gateway#Virtual Network#Hybrid Connectivity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-104 Practice