Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A university needs to establish a hybrid connection between its local campus network and an Azure Virtual Network to access administrative databases. The connection must use the university's existing public internet connection, provide encrypted data transit, and keep setup costs to a minimum. Which Azure service should the university implement to meet these requirements?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Bastion

Answer

Azure VPN Gateway
Azure VPN Gateway is correct because it uses an encrypted tunnel to connect an on-premises network to an Azure Virtual Network over the public internet, keeping costs low compared to dedicated private lines.

Step-by-Step Solution

1
Identify the hybrid connectivity requirements: use of the existing public internet connection, encrypted transit, and minimal setup costs.
Eliminate options that do not connect on-premises environments or that bypass the public internet.
Azure ExpressRoute bypasses the public internet and requires a dedicated circuit, while Azure Virtual Network Peering connects virtual networks within Azure itself rather than connecting on-premises networks to Azure.
2
Select the service that establishes a secure connection over the public internet to complete the hybrid connectivity setup.
Azure VPN Gateway is identified as the correct service.
An Azure VPN Gateway uses a Site-to-Site VPN connection to send encrypted traffic over the public internet, matching all university requirements.

Key Concept

Azure VPN Gateway hybrid connectivity over the public internet
Estimated Time:1m 30s
Rate this question