Microsoft Certified: Cloud and AI Security Engineer Associate (replaces Azure Security Engineer Associate / AZ-500) SC-500 · Domain 2: Secure storage, databases, and networking

Site-to-site and point-to-site VPN, Virtual WAN secured hubs, Microsoft Entra Private Access (ZTNA)

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Hybrid networks need secure ways to connect on-premises sites and remote users to Azure. Azure VPN Gateway provides encrypted tunnels over the internet using IPsec and IKE. It is deployed into a subnet that must be named GatewaySubnet.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Study SC-500 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.

Open the SC-500 study plan