You have an Azure virtual network named Vnet1 and an on-premises network.
The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based.
You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit.

You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?
Suggested Answer: A
Get Premium AZ-700 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
SC
Scarlet
12 months ago
Setting Connection Mode to ResponderOnly doesn't seem right for this setup.
RE
Renea
1 year ago
Wait, are you sure BGP is the only option?
AR
Arlen
1 year ago
I thought you could use custom IPsec/IKE policies instead?
MA
Maryann
1 year ago
Totally agree, BGP is essential here!
HE
Herman
1 year ago
You need to set BGP to Enabled for route-based gateways.
DE
Deonna
1 year ago
I believe enabling the Azure Private IP Address is important for connectivity, but I’m not confident if it’s the first step before creating the connection.
CH
Chauncey
1 year ago
I’m a bit confused about the connection mode options. I thought ResponderOnly was for specific scenarios, but I can't recall if it’s necessary for this setup.
EL
Elly
1 year ago
This question feels familiar; I practiced a similar one where we had to enable BGP for a route-based VPN. I wonder if that applies here too.
EL
Elenor
1 year ago
I think I remember something about needing to set the IPsec/IKE policy to Custom for policy-based VPNs, but I'm not entirely sure if that's the only step needed.
JA
Janessa
1 year ago
Alright, this is a good one. I remember learning about the queue management improvements in the IOM3, but I'm drawing a blank on the details. I'll need to carefully read through the answer choices and see if I can eliminate any of them.
LA
Lavonda
1 year ago
Logging seems off for this context. I think it's definitely between MPLS LSP ping or RSVP. I wish I had focused more on those specific topics!
MI
Miesha
1 year ago
Hmm, I'm a bit unsure about this one. I know we covered WebLogic clustering in class, but the details around distributed JMS destinations are a bit fuzzy for me. I'll have to re-read the question closely and try to recall the best practices.
OT
otwb2pX
3 years ago
B. The configuration option is part of the custom IPsec/IKE connection policy. If you enable the policy-based traffic selector option, you must specify the complete policy (IPsec/IKE encryption and integrity algorithms, key strengths, and SA lifetimes)
From