Examkin

Question

Difficulty: HardAzure Virtual Networks, ExpressRoute, and VPN Gateway

A financial firm requires a hybrid connectivity solution to link its on-premises database to Azure. The security policy mandates that all data in transit must be encrypted using IPsec, and the network path must bypass the public internet entirely to minimize latency and exposure.

Determine whether the following statement is true or false:

To satisfy both requirements, the firm can configure an Azure ExpressRoute circuit with private peering and establish a Site-to-Site VPN connection that runs directly over this private peering path.

Answer: Answer

Answer

True
The statement is true because Azure supports establishing a Site-to-Site VPN tunnel over an ExpressRoute private peering circuit. This enables organizations to encrypt their traffic using IPsec while routing it over a private connection that bypasses the public internet.

Step-by-Step Solution

1
Analyze the networking requirements: data must be encrypted using IPsec, and the connection must bypass the public internet.
Identify that a standard ExpressRoute circuit is private but unencrypted, and a standard Site-to-Site VPN is encrypted but runs over the public internet.
To evaluate the feasibility of the proposed solution.
2
Evaluate the proposed solution of configuring a Site-to-Site VPN over an ExpressRoute private peering circuit.
Azure supports routing Site-to-Site VPN traffic through an ExpressRoute private peering connection, which encrypts the data using IPsec and transports it over the dedicated ExpressRoute link.
To verify if the proposed solution meets both requirements.

Key Concept

Azure ExpressRoute and VPN Gateway coexistence (VPN over ExpressRoute)
Estimated Time:2m 0s
Rate this question

Topics

Azure Virtual Networks, ExpressRoute, and VPN Gateway

More questions from this topic