You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel…

The correct answer is A. IKEDiagnosticLog. IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to review when troubleshooting disconnections, or failure to connect VPN GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table…

Submitted by ashley.k· Apr 18, 2026Design, implement, and manage connectivity services

Question

You fail to establish a Site-to-Site VPN connection between your company's main office and an Azure virtual network. You need to troubleshoot what prevents you from establishing the IPsec tunnel. Which diagnostic log should you review?

Options

AIKEDiagnosticLog
BGatewayDiagnosticLog
CTunnelDiagnosticLog
DRouteDiagnosticLog

How the community answered

(44 responses)

A
77% (34)
B
7% (3)
C
5% (2)
D
11% (5)

Explanation

IKEDiagnosticLog = The IKEDiagnosticLog table offers verbose debug logging for IKE/IPsec. This is very useful to review when troubleshooting disconnections, or failure to connect VPN GatewayDiagnosticLog = Configuration changes are audited in the GatewayDiagnosticLog table. TunnelDiagnosticLog = The TunnelDiagnosticLog table is very useful to inspect the historical connectivity statuses of the tunnel. RouteDiagnosticLog = The RouteDiagnosticLog table traces the activity for statically modified routes or routes received via BGP. P2SDiagnosticLog = The last available table for VPN diagnostics is P2SDiagnosticLog. This table traces the activity for Point to Site. https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics

Topics

#Site-to-Site VPN#IPsec Troubleshooting#VPN Gateway#IKE Diagnostics

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice