Microsoft AZ-800 Exam Questions & Answers

Correct Answer:

Correct Answer:

Box 1: 1 Configuration in Azure Before you use Windows Admin Center, you must perform the following steps through the Azure Portal:

1.

Create a Virtual network in Azure that contains at least two subnets, in addition to subnets required for your gateway connection. One of the subnets you create must use the same subnet CIDR as the on-premises subnet you want to extend. The subnet must be unique within your routing domain so that it does not overlap with any on-premises subnets.

2.

Configure a virtual network gateway to use a site-to-site or ExpressRoute connection to connect the virtual network to your on-premises network.

3.

Create a Windows Server 2022 Azure Edition VM in Azure that is capable of running nested virtualization. This is one of your two virtual appliances. Connect the primary network interface to the routable subnet, and the second network interface to the extended subnet.

Note: Extended network for Azure requires Windows Server 2022 Azure Edition for the VM that is running in Azure.

4.

Etc.

Box 2: 1 On-premises configuration You must also perform some manual configuration in your on-premises infrastructure, including creating a VM to serve as the on-premises virtual appliance:

1.

Make sure the subnets are available on the physical machine where you will deploy the on-premises VM (virtual appliance). This includes the subnet you want to extend and a second subnet that is unique and doesn't overlap with any subnets in the Azure virtual network.

2.

Create a Windows Server 2019 or 2022 VM on any hypervisor that supports nested virtualization. This is the on-premises virtual appliance. We recommend that you create this as a highly available VM in a cluster. Connect a virtual network adapter to the routable subnet and a second virtual network adapter to the extended subnet.

3.

Etc.

Note: Azure using extended network for Azure

Extended network for Azure enables you to stretch an on-premises subnet into Azure to let on-premises virtual machines keep their original on-premises private IP addresses when migrating to Azure.

The network is extended using a bidirectional VXLAN tunnel between two Windows Server 2019 VMs acting as virtual appliances, one running on-premises and the other running in Azure, each also connected to the subnet to be extended.

Each subnet that you are going to extend requires one pair of appliances. Multiple subnets can be extended using multiple pairs

Reference: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-extended-network

Correct Answer:

It is important to remember that the client computers that are connecting to the VPNs are not RADIUS clients. The VPN servers are the RADIUS clients. You configure the RADIUS clients on the RADIUS server (NPS1) server to allow the

VPN servers to use NPS1 to authenticate the connections.

Box 1: No

NPSClient1 is not enabled.

Box 2: Yes

NPSClient2 is configured correctly. It is enabled and has the correct IP address of VPN2.

Box 3: No

NPSClient3 has an incorrect IP address configured for VPN3.