Microsoft · AZ-700
Site-to-site VPN
AZ-700 · Lesson 7 of 20 · 51:26
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-700 exam (Microsoft Certified: Azure Network Engineer Associate). In this lesson: site-to-site VPN design with active-standby, active-active, and dual redundancy, route-based and policy-based gateways, policy-based traffic selectors, zone-redundant VpnGw SKUs, local network gateways, connections and shared keys, custom IPsec/IKE policies, BGP, troubleshooting, and Azure Extended Network. Includes three original practice questions.
Preview the topics
- A warehouse firewall only supports policy-based VPN, and Contoso’s Azure gateway must keep BGP and point-to-site. What should the team do?
- Compliance requires AES-256 GCM and DH group 14 on one warehouse connection only. What should the team configure?
- Contoso moves VMs to Azure, but an old application has their IP addresses hard-coded, so they must keep them for a while. What fits?