A company is preparing for a security audit of its hybrid network connection between an on-premises office and an Azure Virtual Network. The network architect states that because the company uses an Azure ExpressRoute connection, all data in transit is encrypted by default and is completely isolated from the public internet. Is the architect's statement correct?
- No, because ExpressRoute does not encrypt traffic by default, although it does bypass the public internet.Cevap
- BYes, because ExpressRoute uses dedicated private circuits that automatically apply IPsec encryption to all packets.
- CNo, because ExpressRoute traffic is encrypted using IPsec but is routed over the public internet.
- DYes, because ExpressRoute is a hybrid cloud service, which by definition guarantees both encryption and public internet routing.
Cevap
No, because ExpressRoute does not encrypt traffic by default, although it does bypass the public internet.
The correct option is correct because ExpressRoute traffic is routed over a dedicated, private connection that bypasses the public internet. However, this private connection does not provide encryption by default. Customers must configure their own encryption (e.g., using IPsec VPN over ExpressRoute) if they require data encryption in transit.
Adım Adım Çözüm
Anahtar Kavram
Azure ExpressRoute provides a private, high-speed connection to Azure services that bypasses the public internet, but it does not encrypt traffic by default.
Tahmini Süre:2m 0s