Soru

Zorluk: OrtaAzure Virtual Networks, ExpressRoute, and VPN Gateway

An enterprise is planning to establish a hybrid cloud environment by connecting its on-premises headquarters to an Azure Virtual Network. They require a high-speed, reliable primary connection that does not traverse the public internet. They also require a secondary, encrypted backup connection that utilizes their existing public internet infrastructure. Which two of the following statements correctly describe the connectivity services the enterprise should implement? (Select two.)

  1. Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection to Azure that does not traverse the public internet.Cevap
  2. Azure VPN Gateway should be used for the backup connection because it establishes an encrypted tunnel over the public internet.Cevap
  3. C
    Azure ExpressRoute should be used for the backup connection because it automatically encrypts and routes data over the public internet to reduce costs.
  4. D
    Azure Virtual Network Peering should be used to establish the primary connection between the on-premises headquarters and the Azure Virtual Network.

Cevap

The correct statements are that Azure ExpressRoute should be used for the primary connection because it provides a dedicated, private connection to Azure that does not traverse the public internet, and Azure VPN Gateway should be used for the backup connection because it establishes an encrypted tunnel over the public internet.
The correct options are the statements regarding Azure ExpressRoute for the primary connection and Azure VPN Gateway for the backup connection. ExpressRoute provides a private, dedicated path that avoids the public internet, satisfying the high-speed and security requirements. VPN Gateway provides encrypted site-to-site tunnels over the public internet, serving as a cost-effective backup path.

Adım Adım Çözüm

1
Analyze the primary connection requirements
The primary connection must be high-speed, reliable, and bypass the public internet. This aligns with the capabilities of Azure ExpressRoute.
ExpressRoute uses dedicated private connections to connect on-premises environments to Azure without using the public internet.
2
Analyze the backup connection requirements
The backup connection must be encrypted and utilize the existing public internet. This aligns with the capabilities of Azure VPN Gateway.
VPN Gateways establish secure, encrypted Site-to-Site tunnels over the public internet to connect on-premises sites to Azure VNets.
3
Evaluate the distractors
The statement about ExpressRoute routing over the internet is false because ExpressRoute uses private paths. The statement about Virtual Network Peering is false because Peering connects VNets in Azure, not on-premises networks to Azure.
Differentiating these services prevents misconfiguring the architecture.

Anahtar Kavram

Azure hybrid networking options including Azure ExpressRoute for private connectivity and Azure VPN Gateway for encrypted public internet connectivity.
Bu soruyu puanla