🔗 Virtual Network Peering and Connectivity - AZ-104 Practice Questions

Configure VNet peering, VPN gateways, and ExpressRoute for network connectivity.

4Questions Available
1Exam Domains

Practice VNet Peering Questions Now

Start a timed practice session focusing on Virtual Network Peering and Connectivity topics from the AZ-104 question bank.

Start AZ-104 Practice Quiz →

AZ-104 VNet Peering Question Bank (4 Questions)

Browse all 4 practice questions covering Virtual Network Peering and Connectivity for the AZ-104 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Implement and manage virtual networking

    Two Azure virtual networks in the same region — VNet-A (10.1.0.0/16) and VNet-B (10.2.0.0/16) — need to communicate privately. VNet-A has a VPN Gateway. A VM in VNet-B must reach resources in an on-premises network via VNet-A's gateway. What must be enabled on the VNet peering configuration?

    AEnable 'Allow gateway transit' on VNet-A's peering and 'Use remote gateway' on VNet-B's peering
    BEnable 'Allow forwarded traffic' only on VNet-A's peering
    CDeploy a VPN Gateway in VNet-B as well
    DConfigure a User-Defined Route in VNet-B pointing to VNet-A's gateway

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  2. Question 2Implement and manage virtual networking

    A company needs to establish an encrypted site-to-site VPN connection between their on-premises network and an Azure virtual network. They require up to 1 Gbps throughput. Which Azure VPN Gateway SKU family meets this requirement?

    ABasic SKU — supports up to 100 Mbps
    BVpnGw1 SKU — supports up to 650 Mbps
    CVpnGw2 SKU — supports up to 1 Gbps
    DExpressRoute Gateway — required for 1 Gbps VPN

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  3. Question 3Implement and manage virtual networking

    What type of VPN does Azure VPN Gateway support for site-to-site connections?

    AL2TP only
    BIPsec/IKE (IKEv1 and IKEv2)
    CSSL VPN only
    DWireGuard

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  4. Question 4Implement and manage virtual networking

    What is a key difference between Azure VNet peering and VPN Gateway for connecting two VNets?

    AVNet peering is always slower
    BVNet peering uses private IP routing over the Azure backbone (low latency, high bandwidth); VPN Gateway encrypts traffic and costs more per GB
    CThey are functionally identical
    DVPN Gateway supports more VNets than peering

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz

Key VNet Peering Concepts for AZ-104

vnet peeringglobal peeringvpn gatewayexpressroutesite-to-sitepoint-to-site

AZ-104 VNet Peering Exam Tips

Virtual Network Peering and Connectivity questions in AZ-104 are typically scenario-based. Focus on day-to-day Azure administration, identity, network, compute, storage, and monitoring. Priority concepts: vnet peering, global peering, vpn gateway, expressroute, site-to-site, point-to-site.

What AZ-104 Expects

  • Anchor your answer in prioritize operationally practical configurations and least-privilege administration.
  • VNet Peering scenarios for AZ-104 are frequently mapped to Domain 4 (15-20%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where VNet Peering interacts with identity, networking, governance, or monitoring patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.

High-Value VNet Peering Concepts

  • Know the core VNet Peering building blocks cold: vnet peering, global peering, vpn gateway, expressroute.
  • Review the edge-case features and limits for site-to-site, point-to-site; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how VNet Peering pairs with Virtual Networks, VPN & ExpressRoute in real deployment patterns.
  • For AZ-104, explain why the chosen VNet Peering design meets reliability, security, and cost expectations better than the alternatives.

Common AZ-104 Traps

  • Watch for forgetting scope inheritance and RBAC precedence.
  • Questions in Implement and Manage Virtual Networking often include distractors that look correct for VNet Peering but violate least-privilege, compliance, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two VNet Peering implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Implement and Manage Virtual Networking (15-20%) outcomes for AZ-104?
  • Can you explain security and access boundaries for VNet Peering without relying on default-open assumptions?
  • Can you describe how VNet Peering integrates with Virtual Networks and VPN & ExpressRoute during failure, scaling, and monitoring events?

Exam Domains Covering VNet Peering

Related Resources

More AZ-104 Study Resources