🔒 VPN Gateway and ExpressRoute - AZ-104 Practice Questions

Configure site-to-site VPN, point-to-site VPN, and ExpressRoute circuits for hybrid connectivity.

2Questions Available
1Exam Domains

Practice VPN & ExpressRoute Questions Now

Start a timed practice session focusing on VPN Gateway and ExpressRoute topics from the AZ-104 question bank.

Start AZ-104 Practice Quiz →

AZ-104 VPN & ExpressRoute Question Bank (2 Questions)

Browse all 2 practice questions covering VPN Gateway and ExpressRoute for the AZ-104 certification exam. Answers are intentionally hidden on this page so you can self-test first before checking results in quiz mode.

  1. Question 1Implement and manage virtual networking

    A company needs to establish an encrypted site-to-site VPN connection between their on-premises network and an Azure virtual network. They require up to 1 Gbps throughput. Which Azure VPN Gateway SKU family meets this requirement?

    ABasic SKU — supports up to 100 Mbps
    BVpnGw1 SKU — supports up to 650 Mbps
    CVpnGw2 SKU — supports up to 1 Gbps
    DExpressRoute Gateway — required for 1 Gbps VPN

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz
  2. Question 2Implement and manage virtual networking

    What type of VPN does Azure VPN Gateway support for site-to-site connections?

    AL2TP only
    BIPsec/IKE (IKEv1 and IKEv2)
    CSSL VPN only
    DWireGuard

    Answer hidden for practice.

    Use the interactive quiz to reveal the correct answer and explanation.

    Start AZ-104 Quiz

Key VPN & ExpressRoute Concepts for AZ-104

vpn gatewayexpressroutesite-to-sitepoint-to-siteipsecbgphybrid connectivity

AZ-104 VPN & ExpressRoute Exam Tips

VPN Gateway and ExpressRoute questions in AZ-104 are typically scenario-based. Focus on day-to-day Azure administration, identity, network, compute, storage, and monitoring. Priority concepts: vpn gateway, expressroute, site-to-site, point-to-site, ipsec, bgp.

What AZ-104 Expects

  • Anchor your answer in prioritize operationally practical configurations and least-privilege administration.
  • VPN & ExpressRoute scenarios for AZ-104 are frequently mapped to Domain 4 (15-20%), so read the objective carefully before picking controls or architecture.
  • Expect multi-topic scenarios where VPN & ExpressRoute interacts with identity, networking, governance, or monitoring patterns rather than appearing as an isolated question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Associate) and vendor best practices.

High-Value VPN & ExpressRoute Concepts

  • Know the core VPN & ExpressRoute building blocks cold: vpn gateway, expressroute, site-to-site, point-to-site.
  • Review the edge-case features and limits for ipsec, bgp; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how VPN & ExpressRoute pairs with Virtual Networks, VNet Peering in real deployment patterns.
  • For AZ-104, explain why the chosen VPN & ExpressRoute design meets reliability, security, and cost expectations better than the alternatives.

Common AZ-104 Traps

  • Watch for forgetting scope inheritance and RBAC precedence.
  • Questions in Implement and Manage Virtual Networking often include distractors that look correct for VPN & ExpressRoute but violate least-privilege, compliance, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two VPN & ExpressRoute implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Implement and Manage Virtual Networking (15-20%) outcomes for AZ-104?
  • Can you explain security and access boundaries for VPN & ExpressRoute without relying on default-open assumptions?
  • Can you describe how VPN & ExpressRoute integrates with Virtual Networks and VNet Peering during failure, scaling, and monitoring events?

Exam Domains Covering VPN & ExpressRoute

Related Resources

More AZ-104 Study Resources