For a Site-to-Site VPN needing 1 Gbps at lowest cost, recommend the VpnGw2 SKU because VpnGw1 tops out at about 650 Mbps

Plan and implement security for virtual networks
Answer Correct answer: B — Recommend VpnGw2: it delivers 1 Gbps S2S throughput at the lowest cost (VpnGw1 SKUs cap at ~650 Mbps).

You have an on-premises network. You have an Azure subscription that contains the resources shown in the following table. You plan to deploy a Site-to-Site (S2S) VPN between the on-premises network and VNet1. You need to recommend an Azure VPN Gateway SKU that meets the following requirements: • Supports 1-Gbps throughput • Minimizes costs What should you recommend? - image

  1. VpnGw1
  2. VpnGw2 Correct Answer
  3. VpnGw1AZ
  4. VpnGw2AZ

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The 1-Gbps requirement is the deciding constraint: it rules out both VpnGw1 SKUs. Between the two 1-Gbps SKUs, minimize cost selects VpnGw2 over VpnGw2AZ (zone redundancy adds cost without raising the throughput needed here).

A Site-to-Site VPN must sustain 1 Gbps while minimizing cost. VpnGw1 (and the zone-redundant VpnGw1AZ) max out near 650 Mbps, which does not meet the 1-Gbps requirement. VpnGw2 delivers 1 Gbps and is cheaper than VpnGw2AZ, so VpnGw2 is the cost-optimal SKU that satisfies throughput.

Candidates pick VpnGw1 to save money, but it cannot meet 1 Gbps; others pick VpnGw2AZ for redundancy, which exceeds the requirement and costs more than necessary.

Community Discussion (3 comments)

randy0077 👍 1 Selected: B
https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/#:~:text=VpnGw2,hour%20per%20connection
obaemf 👍 2 Selected: B
https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/
xRiot007 👍 1
Correct. VpnGw2 supports 1 Gbps, while Gw1 only 650 Mbps. Ref: https://azure.microsoft.com/en-us/pricing/details/vpn-gateway/

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The requirement is 1-Gbps S2S throughput at the lowest cost. VpnGw1 and VpnGw1AZ support only about 650 Mbps, so they fail the throughput bar. VpnGw2 provides 1 Gbps, and VpnGw2AZ also provides 1 Gbps but adds zone redundancy at higher cost. To minimize cost while meeting 1 Gbps, VpnGw2 is the correct recommendation. (Option B)

Why the Other Options Are Wrong

  • Option A (VpnGw1) and Option C (VpnGw1AZ) both cap near 650 Mbps and cannot satisfy the 1-Gbps requirement.
  • Option D (VpnGw2AZ) meets 1 Gbps but costs more than VpnGw2; the question asks to minimize cost, so the non-AZ VpnGw2 is preferred.

Community Comment Notes

Comments confirmed B and cited the VPN Gateway pricing/SKU docs: 'VpnGw2 supports 1 Gbps, while Gw1 only 650 Mbps.' The resource table in the question is incidental; the throughput constraint alone determines the SKU.

Official Reference

Related Analysis

← Back to AZ-500 Study Guide