Examkin

Question

Difficulty: Very hardAzure Virtual Networks, ExpressRoute, and VPN Gateway

An international retail company is designing a hybrid cloud architecture to connect its on-premises headquarters to an Azure virtual network. The company requires a primary connection that guarantees high bandwidth, ultra-low latency, and never traverses the public internet. Additionally, they require a cost-effective, encrypted backup connection that can automatically handle traffic over the public internet if the primary connection fails. Which hybrid networking configuration meets these requirements?

  1. A primary ExpressRoute connection, with a Site-to-Site VPN connection serving as the backup path.Answer
  2. B
    A primary ExpressRoute connection configured to encrypt and route traffic over the public internet, with a secondary ExpressRoute connection serving as the backup path.
  3. C
    A primary Site-to-Site VPN connection, with a public-facing ExpressRoute connection serving as the backup path to keep all resources strictly within a private cloud model.
  4. D
    A primary Virtual Network peering connection, with a Point-to-Site VPN connection over a dedicated physical fiber link serving as the backup path.

Answer

A primary ExpressRoute connection, with a Site-to-Site VPN connection serving as the backup path.
The correct configuration uses ExpressRoute for the primary connection because it provides a private, high-speed, and low-latency path that does not cross the public internet. The backup path uses a Site-to-Site VPN connection because it is a cost-effective, encrypted tunnel that runs over the public internet, ensuring continuity if the primary private circuit fails.

Step-by-Step Solution

1
Analyze the primary connection requirements.
The requirements are high bandwidth, ultra-low latency, and zero traversal of the public internet. This matches the characteristics of Azure ExpressRoute.
ExpressRoute bypasses the public internet by using a private, dedicated connection through a connectivity provider.
2
Analyze the backup connection requirements.
The backup connection needs to be cost-effective and route encrypted traffic over the public internet. This matches the characteristics of an Azure Site-to-Site VPN.
A Site-to-Site VPN uses a VPN gateway to send encrypted traffic over the public internet, making it cost-effective and suitable for failover.
3
Combine the primary and backup services to find the correct configuration.
The correct configuration is ExpressRoute as the primary connection and Site-to-Site VPN as the backup connection.
This combination ensures that the primary path is high-performing and private, while the secondary path provides a cost-effective fallback over the public internet.

Key Concept

Azure hybrid networking options including ExpressRoute and VPN Gateways.
Rate this question

Topics

Azure Virtual Networks, ExpressRoute, and VPN Gateway

More questions from this topic