Examkin

Soru

Zorluk: ZorAzure Virtual Networks, ExpressRoute, and VPN Gateway

A financial firm requires a hybrid connectivity solution to link its on-premises database to Azure. The security policy mandates that all data in transit must be encrypted using IPsec, and the network path must bypass the public internet entirely to minimize latency and exposure.

Determine whether the following statement is true or false:

To satisfy both requirements, the firm can configure an Azure ExpressRoute circuit with private peering and establish a Site-to-Site VPN connection that runs directly over this private peering path.

Cevap: Cevap

Cevap

True
The statement is true because Azure supports establishing a Site-to-Site VPN tunnel over an ExpressRoute private peering circuit. This enables organizations to encrypt their traffic using IPsec while routing it over a private connection that bypasses the public internet.

Adım Adım Çözüm

1
Analyze the networking requirements: data must be encrypted using IPsec, and the connection must bypass the public internet.
Identify that a standard ExpressRoute circuit is private but unencrypted, and a standard Site-to-Site VPN is encrypted but runs over the public internet.
To evaluate the feasibility of the proposed solution.
2
Evaluate the proposed solution of configuring a Site-to-Site VPN over an ExpressRoute private peering circuit.
Azure supports routing Site-to-Site VPN traffic through an ExpressRoute private peering connection, which encrypts the data using IPsec and transports it over the dedicated ExpressRoute link.
To verify if the proposed solution meets both requirements.

Anahtar Kavram

Azure ExpressRoute and VPN Gateway coexistence (VPN over ExpressRoute)
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Azure Virtual Networks, ExpressRoute, and VPN Gateway

Bu konudan daha fazla soru