Examkin

Question

Difficulty: MediumConfigure Virtual Network Peering

An administrator is configuring connectivity between two virtual networks named `VNet-Core` (172.16.0.0/16172.16.0.0/16) and `VNet-Branch` (172.17.0.0/16172.17.0.0/16). `VNet-Core` contains a Virtual Network Gateway that connects to an on-premises network. To allow virtual machines in `VNet-Branch` to route traffic to the on-premises network via the Virtual Network Gateway in `VNet-Core`, the administrator must enable 'Use remote gateways' on the peering link in `VNet-Core` and enable 'Allow gateway transit' on the peering link in `VNet-Branch`. Is this statement true or false?

Answer: Answer

Answer

The statement is false.
The statement is incorrect because the configuration settings must be applied relative to where the gateway is located. 'Allow gateway transit' must be enabled on the hub network containing the gateway (`VNet-Core`), while 'Use remote gateways' must be enabled on the spoke network utilizing the remote gateway (`VNet-Branch`).

Step-by-Step Solution

1
Identify which virtual network hosts the Virtual Network Gateway.
`VNet-Core` contains the Virtual Network Gateway connected to the on-premises network.
The network that possesses the physical gateway resource is the one that must transit traffic for other networks.
2
Determine the setting required on the gateway-hosting virtual network.
The peering link from `VNet-Core` to `VNet-Branch` must have 'Allow gateway transit' enabled.
This permission allows the gateway to be shared with and utilized by the peered network.
3
Determine the setting required on the remote virtual network without a gateway.
The peering link from `VNet-Branch` to `VNet-Core` must have 'Use remote gateways' enabled.
This configuration instructs the remote network to route its egress traffic via the peer's gateway.

Key Concept

Virtual network peering gateway transit configuration
Rate this question

Topics

Configure Virtual Network Peering

More questions from this topic