Question

Difficulty: EasyAzure Virtual Networks, ExpressRoute, and VPN Gateway

A company is planning to establish a hybrid network connection between their on-premises office and an Azure virtual network. They need to choose the appropriate Azure services for this connection. Which of the following statements about Azure hybrid networking services are correct? (Select two).

  1. Azure ExpressRoute provides a private, dedicated connection to Azure that does not traverse the public internet.Answer
  2. Azure VPN Gateway sends encrypted traffic across the public internet to connect on-premises networks to Azure.Answer
  3. C
    Azure ExpressRoute uses the public internet to route all data traffic securely through an encrypted tunnel.
  4. D
    Connecting an on-premises network to Azure automatically changes the deployment model of the local infrastructure to a public cloud.

Answer

The correct statements are that Azure ExpressRoute provides a private, dedicated connection that does not traverse the public internet, and Azure VPN Gateway sends encrypted traffic over the public internet.
The correct statements describe the fundamental properties of ExpressRoute and VPN Gateway. Azure ExpressRoute provides a private, dedicated connection to Azure that does not use the public internet, whereas Azure VPN Gateway sends encrypted traffic over the public internet.

Step-by-Step Solution

1
Analyze the properties of Azure ExpressRoute.
ExpressRoute provides dedicated, private physical connections to Azure, which bypasses the public internet entirely.
To verify if the statement about ExpressRoute is correct.
2
Analyze the properties of Azure VPN Gateway.
VPN Gateway establishes an encrypted IPSec tunnel over the public internet to connect on-premises networks to Azure.
To verify if the statement about VPN Gateway is correct.
3
Evaluate the distractors against the cloud models and networking concepts.
ExpressRoute does not use the public internet (ruling out the incorrect ExpressRoute statement). Connecting on-premises to Azure creates a hybrid cloud, not a public cloud model (ruling out the deployment model statement).
To identify and eliminate the incorrect options.

Key Concept

Azure hybrid networking options provide different paths and security levels for connecting on-premises datacenters to Azure.
Rate this question