Microsoft Azure Fundamentals (AZ-900)Describe Azure identity, security, and networkingMedium
A company requires a secure, private, and high-bandwidth connection between its on-premises data center and its Azure Virtual Network. This connection must bypass the public internet to ensure predictable performance and enhanced security. Which Azure networking service should they use?
- AVPN Gateway
- BAzure Firewall
- CExpressRoute
- DVNet Peering
Show answer & explanationAnswer & explanation
Correct answer: C. ExpressRoute
Azure ExpressRoute creates a private connection between your on-premises network and Microsoft Azure. It bypasses the public internet, offering higher bandwidth, lower latency, and more reliable connectivity compared to VPNs over the internet.
Why the other options are wrong
- A. VPN Gateway uses encrypted tunnels over the public internet.
- B. Azure Firewall is for network security filtering, not hybrid connectivity.
- D. VNet Peering connects two Azure Virtual Networks, not on-premises to Azure.
Azure ExpressRoute
Azure ExpressRoute is a service that enables you to create private connections between Azure data centers and infrastructure that's on your premises or in a colocation environment.
- Private, dedicated connection
- Bypasses the public internet
- Offers higher bandwidth and lower latency
- Provides more reliable connectivity than site-to-site VPN
Memory trick: ExpressRoute is your private VIP highway directly to Azure, no public roads allowed.