Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

An organization needs to connect its on-premises datacenter to an Azure virtual network to support a hybrid cloud model. The connection must provide high reliability, support a bandwidth of up to 10 Gbps10\text{ Gbps}, and bypass the public internet entirely for security reasons. Which service should the organization implement?

  1. Azure ExpressRouteAnswer
  2. B
    Azure VPN Gateway
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Bastion

Answer

Azure ExpressRoute
The correct option is Azure ExpressRoute because it establishes a private, dedicated connection between an on-premises infrastructure and Azure datacenters. Since it does not traverse the public internet, it provides higher reliability, faster speeds, lower latencies, and tighter security than standard internet-based connections, easily supporting bandwidth requirements of 10 Gbps10\text{ Gbps} or more.

Step-by-Step Solution

1
Analyze the connectivity requirements: hybrid connection to on-premises, bandwidth up to 10 Gbps10\text{ Gbps}, and the necessity to bypass the public internet entirely.
The requirement demands a dedicated private connection rather than an internet-based tunnel.
This filters out solutions that traverse the public internet or are restricted to cloud-only routing.
2
Evaluate the capabilities of the available options: ExpressRoute provides dedicated private circuits bypassing the internet; VPN Gateway encrypts traffic but routes it over the public internet; Virtual Network Peering connects virtual networks within Azure; Bastion provides management access to individual virtual machines.
Only ExpressRoute meets all criteria, including high bandwidth and bypassing the public internet.
Choosing the service that satisfies both the hybrid connectivity and physical routing path constraints.

Key Concept

Private hybrid cloud connectivity with Azure ExpressRoute
Rate this question