Discuss Microsoft AZ-700 Exam Topic 3 Question 58

You plan to configure BGP for a Site-to-Site VPN connection between a datacenter and Azure.

Which two Azure resources should you configure? Each correct answer presents a part of the solution. (Choose two.)

NOTE: Each correct selection is worth one point.

Aa virtual network gateway

BAzure Application Gateway

CAzure Firewall

Da local network gateway

EAzure Front Door

Suggested Answer: A

Here are the steps and explanations for ensuring that requests for wwwjelecloud.com from any of your Azure virtual networks resolve to frontdoor1.azurefd.net:

To use a custom domain with your Azure Front Door, you need to create a CNAME record with your domain provider that points to the Front Door default frontend host. A CNAME record is a type of DNS record that maps a source domain name to a destination domain name1.

To create a CNAME record, you need to sign in to your domain registrar's website and go to the page for managing DNS settings1.

Create a CNAME record with the following information1:

Source domain name: wwwjelecloud.com

Destination domain name: frontdoor1.azurefd.net

Save your changes and wait for the DNS propagation to take effect1.

To verify the custom domain, you need to go to the Azure portal and select your Front Door profile. Then select Domains under Settings and select Add2.

On the Add a domain page, select Non-Azure validated domain as the Domain type and enter wwwjelecloud.com as the Domain name. Then select Add2.

On the Domains page, select wwwjelecloud.com and select Verify. This will check if the CNAME record is correctly configured2.

Once the domain is verified, you can associate it with your Front Door endpoint. On the Domains page, select wwwjelecloud.com and select Associate endpoint. Then select your Front Door endpoint from the drop-down list and select Associate2.

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

40 comments · newest first

Myrtie 11 months ago

Wait, why isn't Azure Application Gateway part of this?

Felix 11 months ago

Nah, just the two gateways are enough.

Arlene 11 months ago

I thought Azure Firewall was required too?

Merissa 12 months ago

Local network gateway is also essential for BGP.

Sylvia 12 months ago

Definitely need a virtual network gateway!

Jeniffer 1 year ago

I recall that Azure Firewall is more for security, so I don't think that's relevant here. It has to be the local network gateway!

Cheryll 1 year ago

I practiced a similar question, and I think the virtual network gateway is a must, but I'm confused about the second option.

Anissa 1 year ago

I'm not entirely sure, but I feel like a local network gateway might also be important for the VPN setup.

Edna 1 year ago

I remember studying BGP configurations, and I think a virtual network gateway is definitely one of the resources needed.

Brittni 1 year ago

I'm a bit confused on this one. I know we need to set up the VPN connection, but I'm not sure which Azure resources are involved. I'll have to review the material again.

Luisa 1 year ago

I've configured this type of VPN connection before, so I'm feeling confident. I think the virtual network gateway and the local network gateway are the two resources I need to configure.

Rima 1 year ago

Okay, let's see. I'm pretty sure a virtual network gateway is one of the key components, but I'm not sure about the other one.

Erasmo 1 year ago

Hmm, this looks like a tricky one. I'll need to think carefully about the Azure resources required for a Site-to-Site VPN connection.

Yaeko 1 year ago

Based on the question, I think the virtual network gateway and Azure Firewall are the two resources we need to configure for this Site-to-Site VPN connection. I'll double-check my work, but that's my initial strategy.

Nobuko 1 year ago

This seems like a straightforward question about manufacturing processes. I'll focus on understanding the key terms like "line hierarchy" and "repetitive manufacturing" to determine the best answer.

Heike 1 year ago

This seems like a straightforward question. I'd recommend decommissioning a virtual machine to reduce costs without impacting performance.

Wilburn 1 year ago

Ah, the classic Azure networking conundrum. A and D are the way to go, no doubt. Though I hear the Azure Firewall makes a great paperweight if you're running low on office supplies.

Rolf 1 year ago

↳ replying to Wilburn

Definitely, Azure Firewall may not be the best choice for this scenario.

Ena 1 year ago

↳ replying to Wilburn

I agree, A and D are the correct choices for configuring BGP for a Site-to-Site VPN connection.

Tabetha 1 year ago

↳ replying to Wilburn

D) a local network gateway

Sarah 1 year ago

↳ replying to Wilburn

A) a virtual network gateway

Freida 1 year ago

This is easy-peasy, folks. A and D are your winners here. Unless, of course, you're trying to connect your datacenter to Azure via interpretive dance. Then you might need the Front Door option.

Delila 1 year ago

↳ replying to Freida

E) Azure Front Door

Lorrie 1 year ago

↳ replying to Freida

D) a local network gateway

Matthew 1 year ago

↳ replying to Freida

A) a virtual network gateway

Gwenn 2 years ago

A and D make the most sense to me. Can't imagine why you'd need an Application Gateway or Front Door for a Site-to-Site VPN. Maybe the exam writers are trying to trick us!

Julio 1 year ago

↳ replying to Gwenn

It's always good to double check and not get tricked by the exam questions!

Corrina 1 year ago

↳ replying to Gwenn

Yeah, Application Gateway and Front Door are more for load balancing and web application firewall, not for VPN connections.

Mari 1 year ago

↳ replying to Gwenn

I agree, A and D are the correct choices for configuring BGP for a Site-to-Site VPN connection.

Herminia 2 years ago

Hmm, I was thinking B and C would be the right answers. Looks like I need to brush up on my Azure networking knowledge.

Cassie 1 year ago

↳ replying to Herminia

User 2: Oh, I thought it was B and C. Thanks for clarifying!

Thersa 1 year ago

↳ replying to Herminia

User 1: I think the correct answers are A and D.

Carlton 2 years ago

Definitely A and D! You need a virtual network gateway and a local network gateway to establish the Site-to-Site VPN connection. The other options are not relevant for this task.

Luisa 1 year ago

↳ replying to Carlton

Azure Front Door is also not relevant in this scenario.

Talia 1 year ago

↳ replying to Carlton

Azure Application Gateway and Azure Firewall are not needed for this specific task.

Dong 1 year ago

↳ replying to Carlton

Virtual network gateway and local network gateway are essential for establishing the connection.

Rhea 1 year ago

↳ replying to Carlton

I agree, A and D are the correct choices for configuring BGP for a Site-to-Site VPN connection.

Karon 2 years ago

I'm not sure about Azure Application Gateway and Azure Front Door. Do we really need to configure those?

Lajuana 2 years ago

I agree with you, Darrin. We also need to configure a local network gateway for the connection.

Darrin 2 years ago

I think we need to configure a virtual network gateway for the BGP connection.

Microsoft AZ-700 Exam - Topic 3 Question 58 Discussion