Question

Difficulty: EasyAzure Virtual Networks, ExpressRoute, and VPN Gateway

An online retailer needs to securely connect a local branch office to an Azure Virtual Network. The retailer has a limited budget and wants to use their existing public internet connection. Which two of the following statements correctly describe this connection? Select two.

  1. An Azure VPN Gateway is used to establish a Site-to-Site connection over the public internet.Answer
  2. The network traffic sent through the VPN tunnel is encrypted for security.Answer
  3. C
    An Azure ExpressRoute connection is used to route this traffic over the public internet.
  4. D
    Deploying this connection transitions the entire infrastructure to a public cloud model.

Answer

The correct answer states that an Azure VPN Gateway is used to establish a Site-to-Site connection over the public internet, and that the network traffic sent through the VPN tunnel is encrypted for security.
The correct statements describe how a Site-to-Site VPN Gateway connection is deployed over the public internet and how it encrypts data in transit. This satisfies the requirements of a low-cost, secure connection over an existing internet link.

Step-by-Step Solution

1
Analyze the requirements for connectivity: secure (encrypted), budget-friendly, and utilizing the existing public internet.
Identify that Azure VPN Gateway satisfies these requirements because it is low-cost, encrypts data in transit, and routes over the public internet.
This matches the budget constraint and the physical path requirements.
2
Evaluate ExpressRoute and cloud deployment model implications.
Determine that ExpressRoute is incorrect because it uses private connections (not the public internet) and that linking on-premises to public cloud results in a hybrid cloud model.
This eliminates the incorrect options.

Key Concept

Hybrid network connectivity options in Azure (VPN Gateway vs ExpressRoute)
Rate this question