nerdexam
Microsoft

AZ-700 · Question #221

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks. You…

The correct answer is B. A Network Virtual Appliance (NVA). Azure Virtual WAN natively supports integration with third-party SD-WAN vendors through Network Virtual Appliances (NVAs) deployed directly inside the Virtual WAN hub (managed hub NVAs). Vendors such as Barracuda, Cisco, VMware SD-WAN, and others offer hub-integrated NVAs that…

Submitted by valeria.br· Apr 18, 2026

Question

You have 10 on-premises networks that are connected by using a 3rd party Software Defined Wide Area Network (SD-WAN) solution. You have an Azure subscription that contains five virtual networks. You plan to connect the Azure virtual networks and the on-premises networks by using an Azure Virtual WAN with a single virtual WAN hub. You need to ensure that the Azure Virtual WAN can act as a node in the 3rd party SD-WAN solution. What should you include in the solution?

Options

  • AAn Azure Virtual WAN ExpressRoute gateway
  • BA Network Virtual Appliance (NVA)
  • CA Site to site gateway (VPN gateway)
  • DA Point to site gateway (User VPN gateway)

How the community answered

(27 responses)
  • A
    11% (3)
  • B
    81% (22)
  • C
    4% (1)
  • D
    4% (1)

Explanation

Azure Virtual WAN natively supports integration with third-party SD-WAN vendors through Network Virtual Appliances (NVAs) deployed directly inside the Virtual WAN hub (managed hub NVAs). Vendors such as Barracuda, Cisco, VMware SD-WAN, and others offer hub-integrated NVAs that allow the Virtual WAN hub to function as a node within their SD-WAN fabric. This enables SD-WAN policies, orchestration, and routing to be applied across both Azure virtual networks and on-premises sites. An ExpressRoute gateway (A) provides dedicated private connectivity but doesn't integrate with SD-WAN control planes. A Site-to-Site VPN gateway (C) and Point-to-Site gateway (D) are standard VPN options that don't natively participate in a third-party SD-WAN solution's orchestration layer.

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice