Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A company plans to connect its on-premises office to Azure. The IT director suggests using Azure ExpressRoute because they believe it will encrypt all traffic sent over the public internet. Which of the following statements correctly addresses the IT director's suggestion?

  1. A
    ExpressRoute is designed to secure traffic over the public internet by establishing a dedicated VPN tunnel.
  2. ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.Answer
  3. C
    ExpressRoute is exclusively a public cloud service and cannot be used to connect on-premises infrastructure in a hybrid cloud model.
  4. D
    ExpressRoute is an Infrastructure as a Service (IaaS) solution, meaning the customer is responsible for patching the underlying operating system of the connection gateway.

Answer

ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.
The correct answer is correct because ExpressRoute is specifically designed to provide a private, dedicated connection to Azure that does not use the public internet. It bypasses the public internet completely to offer higher reliability, faster speeds, and lower latencies.

Step-by-Step Solution

1
Analyze the suggestion made by the IT director regarding Azure ExpressRoute.
The suggestion incorrectly assumes ExpressRoute routes encrypted traffic over the public internet.
Identifying the assumptions in the scenario is necessary to evaluate which statement is correct.
2
Evaluate the architectural characteristics of Azure ExpressRoute.
ExpressRoute provides a dedicated, private connection to Azure via a connectivity provider, which completely bypasses the public internet.
Understanding that ExpressRoute is a private connection, not an internet-based VPN, resolves the misconception.

Key Concept

Azure ExpressRoute private connectivity
Estimated Time:1m 0s
Rate this question