ExamFreeIT Certification Practice, Made Simple

Preparing Practice Exam…

Please wait a moment while the system generates the exam questions, answers, and study session.

ExamFree

Free practice questions with explanations for AWS, Microsoft, CompTIA, Google Cloud, PMI, and more.

Explore

Browse All Exams
About ExamFree
Report a Question

Providers

Microsoft practice exams
Google Cloud practice exams
CompTIA practice exams
PMI practice exams
AWS practice exams
Databricks practice exams
Cisco practice exams
Snowflake practice exams
Anthropic practice exams
Linux Foundation practice exams
HashiCorp practice exams
ITIL practice exams
Red Hat practice exams

© 2026 ExamFree. ExamFree is an independent practice platform and is not affiliated with or endorsed by AWS, Microsoft, Google, CompTIA, PMI, or any certification provider. All certification names and trademarks belong to their respective owners.

Home/Exams/Microsoft/AZ-700/Practice

AZ-700ActiveMicrosoft · Associate

Microsoft Certified: Azure Network Engineer Associate Practice Mode

363 total questions·109 questions in free preview

Practice questions

Question 12 of 109

Free Preview · 109 of 363 · questions 1–109 of 363 are free. Sign up free to sync your progress across devices.

0 of 109 answered

Question Map

109 available

Go to question number

1 / 3

Question 12

View question permalink page

Flag question for review

You have an Azure virtual network named Vnet1 and an on-premises network. The on-premises network has policy-based VPN devices. In Vnet1, you deploy a virtual network gateway named GW1 that uses a SKU of VpnGw1 and is route-based. You have a Site-to-Site VPN connection for GW1 as shown in the following exhibit (detailed in explanation below): You need to ensure that the on-premises network can connect to the route-based GW1. What should you do before you create the connection?

Select one answer.

Marked answer: D

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

Chose D1
using custom IPsec/IKE policy, you can use a route-based VPN gateway and connect to multiple policy-based VPN/firewall devices
Chose D1
Key here is that on-premises POLICY-based VPN needs to communicated to AZ ROUTE-based VPN and this requires to configure 'custom IPsec/IKE policy' and enable 'PolicyBasedTrafficSelectors'
Chose D1
Correct answerd is D. BGP is not mandatory to have a S2S VPN.

12 / 109

Keyboard:←→ previous / nextA–E chooseEnter check, then next