You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.
You need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Click on the arrows to vote for the correct answer
A. B. C. D. E. F.CE
To configure a point-to-site connection from VNet1 to an on-premises computer, we need to perform the following two actions:
F. Add a connection to GW1: We need to add a point-to-site connection to the policy-based virtual network gateway (GW1) that is already present in the Azure subscription. A point-to-site connection is a secure connection between the virtual network and an individual computer or device over the internet. To add a point-to-site connection, we can follow the below steps:
In the Azure portal, open the GW1 virtual network gateway.
In the Settings section, click on Point-to-site configuration.
Click on Configure Now.
In the Address pool section, specify the IP address range that we want to use for the point-to-site VPN clients.
In the Root certificate section, upload the root certificate that will be used to authenticate the VPN clients.
In the VPN client section, download the VPN client package that will be used to configure the connection on the on-premises computer.
A. Add a service endpoint to VNet1: We also need to add a service endpoint to VNet1. A service endpoint is a direct connection from a virtual network to a service. By adding a service endpoint to VNet1, we ensure that traffic from the virtual network to the on-premises computer flows through the policy-based virtual network gateway (GW1) and is encrypted. To add a service endpoint, we can follow the below steps:
In the Azure portal, open the VNet1 virtual network.
In the Settings section, click on Service endpoints.
Click on Add.
In the Add service endpoint section, select the service that we want to connect to.
In the Configure section, select the policy-based virtual network gateway (GW1) from the Gateway dropdown list.
Click on OK to add the service endpoint.
Therefore, the correct actions are F and A.