Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A healthcare provider needs to replicate backup data from its local data center to Azure Storage. Because the data contains sensitive records, the transmission must be encrypted. To minimize operational costs, the provider wants to leverage their existing office internet connection instead of leasing dedicated telecommunication lines. Which Azure service should be deployed to handle this connection?

  1. A
    Azure ExpressRoute
  2. Azure VPN GatewayAnswer
  3. C
    Azure Virtual Network peering
  4. D
    Azure Arc

Answer

Azure VPN Gateway
Azure VPN Gateway is correct because it sends encrypted traffic between an on-premises location and an Azure Virtual Network over the public internet, leveraging the existing network infrastructure and minimizing costs.

Step-by-Step Solution

1
Analyze the business and technical constraints of the scenario.
The solution requires encrypted transport over the public internet, using the existing internet connection, and must minimize costs.
This rules out dedicated, private connectivity options like ExpressRoute.
2
Identify the Azure service that provides encrypted connectivity over the public internet.
Azure VPN Gateway establishes a secure Site-to-Site VPN tunnel over the public internet to connect on-premises networks to Azure.
This matches all stated requirements, including using the existing internet connection and reducing costs.

Key Concept

Azure Virtual Network Gateways and Hybrid Connectivity options
Rate this question