Examkin

Question

Difficulty: MediumAzure Virtual Networks, ExpressRoute, and VPN Gateway

A financial institution has configured a primary, dedicated hybrid network connection between its local data center and an Azure Virtual Network. To ensure redundancy, the institution needs to implement a secondary connection that routes encrypted traffic over the public internet as a backup. Which Azure service should be used to establish this secondary backup path?

  1. Azure VPN GatewayAnswer
  2. B
    Azure ExpressRoute
  3. C
    Azure Virtual Network Peering
  4. D
    Azure Arc

Answer

Azure VPN Gateway
Azure VPN Gateway is correct because it allows the creation of a Site-to-Site VPN connection that encrypts network traffic and routes it over the public internet between an on-premises network and an Azure Virtual Network, which perfectly fits the requirements of an internet-based, encrypted backup path.

Step-by-Step Solution

1
Analyze the requirements
The solution requires a secondary, redundant hybrid network path that uses the public internet and encrypts traffic.
Understanding the design criteria helps filter out services that do not support hybrid connectivity or public internet routing.
2
Evaluate the network connectivity options
Azure VPN Gateway establishes an encrypted tunnel over the public internet, matching the redundancy requirements, whereas ExpressRoute uses a private connection, VNet Peering connects internal Azure networks, and Azure Arc is a management tool rather than a network gateway.
Comparing capabilities ensures the selected service aligns with both the routing and security constraints of the scenario.

Key Concept

Azure hybrid networking services and their public internet vs. private connection routing paths
Rate this question

Topics

Azure Virtual Networks, ExpressRoute, and VPN Gateway

More questions from this topic