Question

Difficulty: EasyAzure Virtual Networks, ExpressRoute, and VPN Gateway

A company is planning to establish a hybrid network connection to link their on-premises office to resources in an Azure Virtual Network (VNet). They are evaluating Azure ExpressRoute and Azure VPN Gateway. Which two statements regarding these connectivity options are correct? (Select two.)

  1. Azure VPN Gateway sends encrypted traffic across the public internet to connect the on-premises network to the Azure Virtual Network.Answer
  2. B
    Azure ExpressRoute sends encrypted traffic across the public internet to provide a secure connection to the Azure Virtual Network.
  3. Azure ExpressRoute provides a dedicated, private connection to Azure that completely bypasses the public internet.Answer
  4. D
    Azure VPN Gateway is exclusively used in a public cloud model and cannot be deployed in a hybrid cloud configuration.

Answer

The correct options are: 'Azure VPN Gateway sends encrypted traffic across the public internet to connect the on-premises network to the Azure Virtual Network' and 'Azure ExpressRoute provides a dedicated, private connection to Azure that completely bypasses the public internet'.
Azure VPN Gateway encrypts traffic and sends it over the public internet, whereas Azure ExpressRoute provides a private, dedicated connection that bypasses the public internet entirely.

Step-by-Step Solution

1
Analyze the features of Azure VPN Gateway.
Confirm that Azure VPN Gateway uses the public internet to send encrypted traffic between on-premises and Azure VNets.
This is a key characteristic of Azure VPN Gateway, establishing its correctness.
2
Analyze the features of Azure ExpressRoute.
Confirm that Azure ExpressRoute uses a private, dedicated physical connection that bypasses the public internet.
This is a key characteristic of Azure ExpressRoute, establishing its correctness and disproving the option claiming it uses the internet.
3
Evaluate the hybrid cloud capability.
Identify that Azure VPN Gateway connects on-premises environments to Azure, which is by definition a hybrid cloud scenario.
This shows the option claiming it cannot be used in hybrid configurations is incorrect.

Key Concept

Azure VPN Gateway and ExpressRoute hybrid connectivity characteristics
Estimated Time:1m 0s
Rate this question