AZ-700 Question #56: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have two Azure virtual networks named Vnet1 and Vnet2. You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN. You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit. Vnet2 can use the remote gateway. You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You enable BGP on the gateway of Vnet1. Does this meet the goal?

Options

• AYes
• BNo

Explanation

The answer is No - the proposed solution does not resolve the issue. When a Point-to-Site (P2S) VPN client connects and VNet peering with 'Allow Gateway Transit' (on Vnet1) and 'Use Remote Gateways' (on Vnet2) is configured, the VPN client must download and reinstall an updated VPN client configuration package. The VPN client's routing table is only aware of address spaces known at the time of connection or last config download. The proposed solution in this series question (likely resetting the VPN gateway or some other action) does not address the need to download the updated client configuration, which is the correct fix to allow Client1 to reach Vnet2's address space.

No community discussion yet for this question.