You are planning an Azure deployment that will contain three virtual networks in the East US Azure region as shown in the following table. 

A Site-to-Site VPN will connect Vnet1 to your company's on-premises network. You need to recommend a solution that ensures that the virtual machines on all the virtual networks can communicate with the on-premises network- The solution must minimize costs. What should you recommend for Vnet2 and Vnet3?

You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1 You need to deploy Azure Firewall to RG1. The solution must minimize administrative effort What should you do first?

You have an Azure application gateway configured for a single website that is available at https://www. contoso.com. The application gateway contains one backend pool and one rule. The backend pool contains two backend servers. Each backend server has an additional website that is available on port 8080. You need to ensure that if port 8080 is unavailable on a backend server, all the traffic for https://www.contoso. com is redirected to the other backend server. What should you do?

You need to configure the default route in Vnet2 and Vnet3. The solution must meet the virtual networking requirements. What should you use to configure the default route?

You have an Azure virtual network and an on-premises datacenter. You need to implement a Site-to-Site VPN connection between the datacenter and the virtual network. Which two resources should you create? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.