An organization hosts a web application in an Azure virtual network in the East US region, and a database workload in another Azure virtual network in the West US region. The organization needs to allow the web application to securely communicate with the database. The solution must ensure that the traffic routes directly over the Microsoft backbone network without traversing the public internet, and it must not require the deployment of virtual network gateways. Which network connectivity feature should the organization implement?
- AA Site-to-Site VPN connection, which routes the traffic securely between the public cloud regions using a hybrid network tunnel
- BExpressRoute, which creates a dedicated circuit to route the traffic securely across the public internet
- Virtual network peering, which connects the virtual networks directly using the Microsoft backbone networkAnswer
- DA Point-to-Site VPN connection, which allows the virtual networks to communicate using individual client-based configuration files
Answer
Virtual network peering, which connects the virtual networks directly using the Microsoft backbone network
Virtual network peering is the correct choice because it enables direct, low-latency communication between Azure virtual networks across different regions. The traffic is routed over Microsoft's private backbone network rather than the public internet, and it does not require virtual network gateways, meeting all criteria.
Step-by-Step Solution
Key Concept
Azure Virtual Network Peering