Question

Difficulty: EasyAzure Virtual Networks, ExpressRoute, and VPN Gateway

A company wants to connect its on-premises head office to an Azure virtual network. The network traffic must be encrypted during transit, setup costs must be kept minimal, and the connection can run over the public internet. Which Azure service should the company use to meet these requirements?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network peering
  4. D
    Azure Bastion

Answer

Azure VPN Gateway
Azure VPN Gateway is correct because it establishes an encrypted VPN tunnel over the public internet to connect on-premises environments to Azure virtual networks, making it a cost-effective option for hybrid networking.

Step-by-Step Solution

1
Analyze the requirements for connecting the on-premises network to Azure.
The connection needs to be encrypted, have a low setup cost, and utilize the public internet.
Identifying these parameters filters out services that rely on dedicated private paths or serve different routing purposes.
2
Evaluate the available Azure services against the requirements.
Azure VPN Gateway fits all requirements because it creates encrypted tunnels over the public internet. Azure ExpressRoute uses private circuits, Virtual Network peering connects networks within Azure, and Azure Bastion manages secure VM access.
Matching the requirements to service capabilities determines the correct choice.

Key Concept

Azure VPN Gateway provides secure, encrypted hybrid connectivity over the public internet.
Estimated Time:45s
Rate this question