You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by using an on premises Active Directory domain. Which additional service should you deploy to…

The correct answer is B. a RADIUS server. When an Azure P2S VPN is configured with OpenVPN and on-premises Active Directory credentials, a RADIUS server is required as the authentication intermediary. Azure's VPN gateway forwards authentication requests to the RADIUS server, which in turn validates credentials against…

Submitted by yousef_jo· Apr 18, 2026Design, implement, and manage connectivity services

Question

You are planning an Azure Point-to-Site (P2S) VPN that will use OpenVPN. Users will authenticate by using an on premises Active Directory domain. Which additional service should you deploy to support the VPN authentication?

Options

Aa certification authority (CA)
Ba RADIUS server
Can Azure key vault
DAzure Active Directory (Azure AD) Application Proxy

How the community answered

(56 responses)

A
7% (4)
B
75% (42)
C
14% (8)
D
4% (2)

Explanation

When an Azure P2S VPN is configured with OpenVPN and on-premises Active Directory credentials, a RADIUS server is required as the authentication intermediary. Azure's VPN gateway forwards authentication requests to the RADIUS server, which in turn validates credentials against the on-premises AD domain. A certification authority (A) is needed for certificate-based authentication, not AD credential-based auth. Azure Key Vault (C) stores secrets and certificates but does not perform authentication. Azure AD Application Proxy (D) publishes on-premises apps to external users and is unrelated to VPN authentication.

Topics

#Azure VPN Gateway#Point-to-Site VPN#RADIUS#Authentication

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice