Question

Difficulty: HardAzure Virtual Networks, ExpressRoute, and VPN Gateway

A financial organization needs to establish network connectivity between its on-premises headquarters and resources inside an Azure virtual network. The organization's compliance team mandates that no data can traverse the public internet, and the application requires a dedicated connection with guaranteed bandwidth and sub-millisecond latency.

Which Azure service should the organization implement?

  1. Azure ExpressRouteAnswer
  2. B
    Azure VPN Gateway
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Bastion

Answer

Azure ExpressRoute
Azure ExpressRoute establishes a private connection between an on-premises infrastructure and Azure datacenters through a connectivity provider. Because this traffic does not go over the public internet, it ensures compliance with the strict security policy and provides highly predictable bandwidth and low latency.

Step-by-Step Solution

1
Analyze the business and technical requirements.
The solution must connect on-premises to Azure, bypass the public internet entirely, and provide dedicated bandwidth and ultra-low latency.
This filters out services that use the public internet or do not support hybrid connectivity.
2
Compare Azure hybrid networking options against the constraints.
Azure VPN Gateway uses the public internet. Azure ExpressRoute uses a dedicated private connection via a connectivity provider, bypassing the public internet.
To select the service that satisfies both the compliance and performance constraints.

Key Concept

Azure ExpressRoute private hybrid connectivity
Estimated Time:1m 30s
Rate this question