AZ-303 Exam - Question 285

Question

You have an Azure subscription named Subscription1 that contains two Azure networks named VNet1 and VNet2. VNet1 contains a VPN gateway named

VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1.

On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1.

You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2.

You need to ensure that you can connect Client1 to VNet2.

What should you do?

Examice · Accepted Answer

When a point-to-site VPN connection is configured on a client machine and any changes are made to the network topology, such as enabling virtual network peering, it becomes necessary to update the VPN client configuration on that machine. This ensures that the client has the updated routing information required to establish connections to the new peered network. Therefore, downloading and re-installing the VPN client configuration package on Client1 is necessary to enable it to connect to VNet2.

Tripp_F · Answer

The correct answer is B: 
Download and re-install the VPN client configuration package on Client1.

This must be done because of the network configuration change (peering enabled).

Yiannisthe7th · Answer

D is correct, "Clients using Windows can access directly peered VNets, but the VPN client must be downloaded again if any changes are made to VNet peering or the network topology."

syu31svc · Answer

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

If you make a change to the topology of your network and have Windows VPN clients, the VPN client package for Windows clients must be downloaded and installed again in order for the changes to be applied to the client

B is the answer

AZ-303 Exam - Question 285

Discussion