Examkin

Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A healthcare provider is deploying an application in Azure that must access patient records stored in a database server at their physical clinic. Due to strict compliance regulations, the network path between the clinic and Azure must be completely isolated from the public internet. Which Azure service should be used to establish this connection?

  1. A
    Site-to-Site VPN Gateway
  2. ExpressRouteAnswer
  3. C
    Point-to-Site VPN Gateway
  4. D
    Virtual Network Peering

Answer

ExpressRoute
ExpressRoute is the correct option because it establishes a dedicated, private connection between physical infrastructure and Azure. Because this private link is facilitated by a connectivity provider, the traffic bypasses the public internet completely, satisfying the security and compliance requirements.

Step-by-Step Solution

1
Analyze the connectivity requirements in the scenario.
The network connection must link a physical clinic (on-premises) to Azure resources, and the network path must be completely isolated from the public internet.
Understanding the constraints is necessary to filter out unsuitable Azure networking services.
2
Evaluate the candidate services against the public internet isolation constraint.
VPN Gateway solutions (Site-to-Site and Point-to-Site) encrypt traffic but still use the public internet. Virtual Network Peering only connects networks internal to Azure. ExpressRoute provides a dedicated, private connection that does not use the public internet.
Comparing service specifications to client requirements allows identification of the correct Azure hybrid connection model.

Key Concept

Azure hybrid networking connectivity options and their public internet usage
Estimated Time:1m 0s
Rate this question

Topics

Azure Virtual Networks, ExpressRoute, and VPN Gateway

More questions from this topic