A financial institution is designing a network topology in Azure to securely isolate different environments while maintaining some private connectivity. They need to understand how Azure Virtual Networks (VNets), ExpressRoute, and VPN Gateways operate under various configurations.
Which of the following statements regarding Azure hybrid networking are correct? (Select two)
- Azure ExpressRoute establishes a private connection to Microsoft services that does not go over the public internet.Answer
- An Azure VPN Gateway connection transmits encrypted traffic across the public internet between an on-premises network and an Azure Virtual Network.Answer
- CAzure ExpressRoute relies on the public internet as the underlying transmission medium but encrypts all traffic to ensure privacy.
- DEstablishing connectivity between an on-premises network and Azure resources converts the configuration into a public cloud model rather than a hybrid cloud model.
Answer
The correct statements are that Azure ExpressRoute establishes a private connection that does not go over the public internet, and an Azure VPN Gateway connection transmits encrypted traffic across the public internet.
The correct options are the statements describing ExpressRoute as a private connection that does not traverse the public internet, and VPN Gateway as a connection that sends encrypted traffic over the public internet. ExpressRoute provides dedicated, private connection paths to Microsoft cloud services via a connectivity provider, enhancing reliability, speed, and privacy. A VPN Gateway, on the other hand, utilizes the public internet to establish a secure, encrypted tunnel between the on-premises site and the Azure Virtual Network.
Step-by-Step Solution
Key Concept
Azure hybrid networking options, specifically the differences in traffic paths between ExpressRoute (private, bypasses public internet) and VPN Gateway (encrypted over the public internet), and how they enable hybrid cloud architectures.