Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

An agricultural technology company aggregates telemetry data from remote IoT sensors on a local on-premises server. The company needs to establish a secure connection from this server to an Azure Virtual Network to upload the data. The solution must be cost-effective, encrypt all data in transit, and utilize the company's existing public internet connection. Which Azure service is best suited to meet these requirements?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network (VNet) peering
  4. D
    Azure Bastion

Answer

Azure VPN Gateway
Azure VPN Gateway is the correct choice because it establishes an encrypted tunnel over the public internet (Site-to-Site VPN) between the on-premises network and the Azure Virtual Network, providing a secure and cost-effective connection.

Step-by-Step Solution

1
Analyze the requirements from the scenario: on-premises to Azure hybrid connection, secure (encrypted), low-cost/cost-effective, and utilizing the existing public internet.
Identify that the solution must route encrypted traffic over the public internet rather than a private dedicated line.
Understanding the constraints is necessary to eliminate options that use private lines or do not connect on-premises environments.
2
Evaluate Azure VPN Gateway against the requirements.
VPN Gateway supports Site-to-Site VPN connections which encrypt data in transit and run over the public internet, making it the most cost-effective match.
Validating the correct service ensures the scenario requirements are fully met.

Key Concept

Hybrid network connectivity using Azure VPN Gateway
Rate this question