Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
Microsoft logo

Microsoft Certified:Azure Network Engineer Associate

Domain 2Objective 1

Design, Implement, and Manage a Site-To-Site VPN Connection AZ-700 Practice Questions (Page 1)

Part of the Design, implement, and manage connectivity services domain, which accounts for 20–25% of the AZ-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here
7free pages
9concepts
20–25%of the exam

Questions 1–5

  1. 1foundation · easy

    Which Azure service or feature is required to implement Azure Extended Network?

    Select an answer first
  2. 2application · easy

    You are implementing a site-to-site VPN between an on-premises network and an Azure VNet. You have already created the virtual network gateway and the local network gateway. What is the next step to establish the VPN connection?

    Select an answer first
  3. 3application · easy

    You are configuring a site-to-site VPN from your on-premises network to Azure. The on-premises VPN device has a public IP address of 203.0.113.10 and the on-premises network uses the 10.10.0.0/16 address space. You need to create the Azure object that represents the on-premises network. What should you create?

    Select an answer first
  4. 4foundation · easy

    An organization needs a site-to-site VPN connection that will support multiple tunnels and dynamic routing protocols such as BGP. Which VPN type should be used for the Azure virtual network gateway?

    Select an answer first
  5. 5expert · hard

    A site-to-site VPN connection is failing to establish. The on-premises VPN device logs show that it is sending IKEv2 proposals with AES256-GCM for encryption and SHA256 for integrity. The Azure VPN gateway is configured with a custom IPsec/IKE policy that specifies AES256 and SHA256 for both IKE and IPsec. What is the most likely cause of the failure?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-700

Keep studying — Design, implement, and manage connectivity services

Full AZ-700 curriculum →Every domain, objective & concept — with linked practiceAZ-700 exam overview →Microsoft Certified: Azure Network Engineer Associate

Other objectives in Design, implement, and manage connectivity services

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-700” is a trademark of its owner, used for identification only.