Question

Difficulty: HardAzure Virtual Networks, ExpressRoute, and VPN Gateway

An organization with a hybrid cloud infrastructure plans to deploy a new system. They need to connect their on-premises headquarters and a temporary retail kiosk to an Azure Virtual Network.

The headquarters requires a dedicated connection with predictable latency and maximum bandwidth that completely avoids the public internet.

The temporary kiosk requires a low-cost connection that must be established over the public internet within 24 hours.

Which connectivity options should the organization choose for the headquarters and the kiosk?

  1. ExpressRoute for the headquarters, and a VPN Gateway connection for the kioskAnswer
  2. B
    A VPN Gateway connection for the headquarters, and ExpressRoute for the kiosk
  3. C
    ExpressRoute for the headquarters, and Virtual Network Peering for the kiosk
  4. D
    A VPN Gateway connection for the headquarters, and Virtual Network Peering for the kiosk

Answer

ExpressRoute for the headquarters, and a VPN Gateway connection for the kiosk
The correct answer is the option specifying ExpressRoute for the headquarters and a VPN Gateway connection for the kiosk. ExpressRoute satisfies the headquarters' need for a high-bandwidth, low-latency connection that completely bypasses the public internet by routing traffic over a private, dedicated circuit. A VPN Gateway satisfies the kiosk's requirements because it can be established rapidly over the public internet using standard IPsec VPN connections at a low cost.

Step-by-Step Solution

1
Analyze the requirements for the headquarters connection.
The headquarters needs a dedicated connection, predictable latency, maximum bandwidth, and must completely bypass the public internet. This matches the capabilities of Azure ExpressRoute.
ExpressRoute provides private connectivity to Azure via a connectivity provider, bypassing the public internet entirely.
2
Analyze the requirements for the temporary kiosk connection.
The kiosk needs a low-cost connection established quickly (within 24 hours) over the public internet. This matches the capabilities of an Azure VPN Gateway.
VPN Gateway connections can be deployed rapidly over existing public internet infrastructure at a lower cost than dedicated circuits.
3
Evaluate and eliminate options using Virtual Network (VNet) Peering.
VNet Peering is strictly for connecting Azure VNets to each other and cannot connect on-premises locations directly.
VNet Peering does not apply to hybrid (on-premises to cloud) physical device connectivity.

Key Concept

Selecting appropriate Azure hybrid connectivity services based on bandwidth, latency, cost, and deployment speed requirements.
Estimated Time:2m 0s
Rate this question