A health department is designing a network architecture to connect its on-premises clinics to Azure. They need a primary connection for database replication that avoids the public internet entirely, and a secondary, cost-effective backup connection that encrypts data in transit.
Which two statements correctly describe how Azure hybrid networking services should be deployed for this scenario?
- Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection that bypasses the public internet.Answer
- An Azure Site-to-Site VPN gateway can be deployed to provide an encrypted tunnel over the public internet for the backup connection.Answer
- CAzure ExpressRoute should be configured as the backup connection because it routes encrypted traffic over the public internet at a lower cost than a VPN gateway.
- DThe health department must migrate all clinic databases to the public cloud to establish the connection, as hybrid cloud models do not support keeping database resources on-premises.
Answer
The primary database replication connection should use Azure ExpressRoute because it is a private connection that bypasses the public internet. The backup connection should use an Azure Site-to-Site VPN gateway because it provides encrypted data transit over the public internet at a lower cost.
The option stating that Azure ExpressRoute should be used for the primary connection is correct because ExpressRoute provides a private connection that does not traverse the public internet. The option stating that a Site-to-Site VPN gateway can be deployed for the backup connection is correct because VPN gateways encrypt traffic in transit over the public internet, offering a cost-effective backup option.
Step-by-Step Solution
Key Concept
Azure hybrid networking offers ExpressRoute for private, high-speed connections and VPN Gateways for encrypted connections over the public internet.
Estimated Time:1m 30s