What must you do to ensure a Windows 10 client can connect to a peer virtual network via a point-to-site VPN?

To enable a Windows 10 client to establish a connection to a peer virtual network using a point-to-site VPN, configuring the VPN client on the client machine is essential. This process involves installing the necessary VPN client software and defining the connection settings, which include parameters such as the target VPN gateway, authentication details, and any required certificates.

The VPN client configuration ensures that the Windows 10 device can securely connect to the Azure VPN gateway without requiring any additional connectivity configurations from the Azure side itself. This step is fundamental before any other networking elements come into play, as it directly empowers the client to initiate and manage the VPN connection effectively.

Other options mentioned relate to broader network configurations and may not directly affect the client’s ability to connect. Selecting "Allow gateway transit" on virtual networks pertains to shared access between virtual networks and would be more relevant in site-to-site VPN scenarios rather than point-to-site configurations. Enabling static routing on the VPN gateway might be significant for routing traffic between specific points or networks but does not specifically configure the client itself. Thus, ensuring that the VPN client is correctly set up is the most straightforward and necessary step for enabling point-to-site connectivity.