Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

An international shipping company operates local branch offices in several coastal cities. Each office needs to establish a secure, encrypted connection to a shared database hosted in an Azure Virtual Network. The solution must utilize the existing local internet connections at each office. Which Azure service should be deployed to meet these requirements?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Arc

Answer

Azure VPN Gateway
A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between an Azure virtual network and an on-premises location over the public internet. This perfectly aligns with the requirement to secure traffic using the offices' existing internet connections.

Step-by-Step Solution

1
Analyze the connectivity requirements of the scenario.
The offices need a secure, encrypted connection to Azure over the public internet using their existing local internet connections.
This determines the type of network path (public internet vs. private dedicated line) and security requirements (encryption).
2
Evaluate the capabilities of Azure networking services.
VPN Gateway sends encrypted traffic over the public internet, whereas ExpressRoute bypasses the public internet completely.
Identifying which service matches the public internet transport and encryption requirement.

Key Concept

Azure VPN Gateway provides secure, encrypted hybrid connectivity over the public internet, unlike ExpressRoute which uses a private, dedicated connection.
Estimated Time:1m 0s
Rate this question