A company is implementing a hybrid networking architecture to connect its on-premises office to resources inside an Azure virtual network. The design requires a primary high-bandwidth private connection and a secondary, encrypted backup connection that runs over the public internet.
Which two statements correctly describe the connectivity options that should be used for this design? (Select two)
- ExpressRoute routes traffic over a dedicated, private connection rather than the public internet.Answer
- A Site-to-Site VPN Gateway connection encrypts traffic and transmits it over the public internet.Answer
- CExpressRoute provides encrypted tunnels that transmit data directly over the public internet.
- DA VPN Gateway connection is restricted to public cloud environments and cannot be used in hybrid configurations.
Answer
ExpressRoute routes traffic over a dedicated, private connection rather than the public internet, and a Site-to-Site VPN Gateway connection encrypts traffic and transmits it over the public internet.
The correct options are the ones stating that ExpressRoute routes traffic over a dedicated private connection and that a Site-to-Site VPN Gateway encrypts traffic and transmits it over the public internet. ExpressRoute connects local datacenters directly to Azure resources via a private network partner, avoiding the public internet for increased security, speed, and reliability. In contrast, a Site-to-Site VPN Gateway establishes an encrypted tunnel over the public internet, making it an excellent cost-effective backup option.
Step-by-Step Solution
Key Concept
Azure hybrid networking services including ExpressRoute and VPN Gateways.