AZ104-Q: share a hub VPN gateway

Spoke VNets need on-premises connectivity through the hub VNet’s VPN gateway. What must the peering configuration allow?

  • A) A public IP on every spoke VM.
  • B) A storage service endpoint.
  • C) An application gateway listener.
  • D) Gateway transit on the hub peering and use of remote gateways on the spoke side, where supported. ✓ Answer: D. Gateway transit enables spokes to use the hub’s gateway instead of deploying one per spoke. Why not the others: The other options do not configure VNet gateway sharing.

vnet-peering · vpn-gateway