Q: 6
Your on-premises network has an IP address range of 10.0.0.0/23.
You have an Azure virtual network named VNet1 that contains a virtual machine named VM1
VNet1 has an IP address range of 10.0.1.0/24.
You need to deploy a Site-to-Site (S2S) VPN to connect the on-premises network to VNet1.
What should you do first?
Options
Discussion
Option C makes sense because Azure requires non-overlapping address ranges for S2S VPN, so reconfiguring VNet1 to 10.0.2.0/24 should be step one. The official docs and practice tests highlight this overlap issue a lot, but let me know if you see it differently!
B or D. New-ADServiceAccount on DC1 (B) makes sense since that's where you create the gMSA, but I've seen practice tests mention Install-ADServiceAccount on the DC (D) too, and it's easy to mix up. Official guide goes into this but I'm not 100% sure here.
Probably A and B. You have to create the gMSA on DC1 with New-ADServiceAccount (B), then install it locally on Server1 using Install-ADServiceAccount (A). D is a trap because you don't install the account on the DC. Pretty sure that's how it's meant to be, but open to corrections if I'm missing something.
Probably D and B. Question is well laid out, easy to follow for figuring out which actions go where.
A is wrong, C. You can't have overlapping subnets between on-prem and VNet for a Site-to-Site VPN in Azure, so you need to pick a different address space first. I remember a similar thing popping up in old exam reports.
It's A and B. D is a bit of a trap since you don't install the service account on the DC, it's always on the target app server (Server1 here). Seen this asked in practice sets too, so pretty confident unless MS changes something.
Why not D here instead of A? Install-ADServiceAccount runs on the app server, right?
A and B make sense here. B for creating the gMSA on DC1, then A to install it on Server1 where the service runs. D is tempting but you install locally, not on the DC. Pretty sure that's right, correct me if not.
Nope, it's A and B for this scenario.
B and A
Be respectful. No spam.
