Examkin

Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A startup is deploying its web application to Azure and needs to connect its on-premises development office to the Azure Virtual Network. The network connection must be secure, encrypt all traffic in transit, and be established quickly using the office's existing public internet connection. Which Azure service should the startup implement to meet these requirements?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Bastion

Answer

Azure VPN Gateway
Azure VPN Gateway is the correct service because it creates an encrypted connection (a Site-to-Site VPN tunnel) over the public internet between an on-premises location and an Azure Virtual Network. This allows for a fast, cost-effective setup using existing internet infrastructure.

Step-by-Step Solution

1
Analyze the connectivity requirements: the connection must route over the public internet, encrypt all traffic in transit, and connect an entire on-premises network to Azure.
Determine that ExpressRoute is unsuitable because it uses a private dedicated line rather than the public internet and does not encrypt traffic by default.
This narrows down the options to internet-based hybrid connectivity solutions.
2
Evaluate the remaining options (VPN Gateway, Virtual Network Peering, and Bastion) to find the service designed for site-to-site network connectivity.
Identify that Azure VPN Gateway creates an encrypted Site-to-Site tunnel over the public internet, whereas Virtual Network Peering only connects Azure-native networks, and Bastion is for VM-specific administrative access.
To select the service that matches the hybrid connectivity and encryption requirements.

Key Concept

Azure VPN Gateway provides secure, encrypted site-to-site connectivity over the public internet, whereas ExpressRoute provides dedicated, private, and unencrypted connectivity bypassing the public internet.
Rate this question

Topics

Azure Virtual Networks, ExpressRoute, and VPN Gateway

More questions from this topic