You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.\nYou need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer.\nWhich two actions should you perform? Each correct answer presents part of the solution.\nNOTE: Each correct selection is worth one point.\nA. Reset GW1.\nB. Create a route-based virtual network gateway.\nC. Delete GW1.\nD. Add a public IP address space to VNet1.\nE. Add a connection to GW1.\nF. Add a service endpoint to VNet1.\nCorrect Answer: BC\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nB: A VPN gateway is used when creating a VPN connection to your on-premises network.\nRoute-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to different IPsec tunnels. It is typically built on\nrouter platforms where each IPsec tunnel is modeled as a network interface or VTI (virtual tunnel interface).\nC: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically\nbuilt on firewall devices that perform packet filtering. IPsec tunnel encryption and decryption are added to the packet filtering and processing engine.\nIncorrect Answers:\nD: Point-to-Site connections do not require a VPN device or a public-facing IP address.\nReferences: https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-\nportal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-\nrm-ps
","frontmatter":{"date":null,"number":null,"title":"","options":null,"explanation":null,"references":null,"answer":null}},"previous":{"edges":[]},"next":{"edges":[]}},"pageContext":{"title":"50","fileAbsolutePath":"/opt/build/repo/src/data/50.md","number":null}},"staticQueryHashes":["2744294623","3649515864"]}