Microsoft Certified: Azure Solutions Architect ExpertDesign infrastructure solutionsEasy

A company requires a network solution to securely connect its on-premises data center to Azure virtual networks. The connection needs to provide high bandwidth, low latency, and guaranteed uptime, bypassing the public internet. Which Azure networking service should be recommended?

  1. AAzure ExpressRoute
  2. BAzure Virtual WAN
  3. CAzure VPN Gateway
  4. DAzure Private Link
Show answer & explanation

Correct answer: A. Azure ExpressRoute

Azure ExpressRoute creates a private, dedicated connection between an on-premises network and Azure, bypassing the public internet. This provides higher bandwidth, lower latency, and guaranteed uptime, meeting all the specified requirements.

Why the other options are wrong

  • B. Azure Virtual WAN is a networking service that simplifies complex network deployments, but ExpressRoute is the underlying technology for dedicated private connectivity.
  • C. Azure VPN Gateway uses encrypted tunnels over the public internet, which does not guarantee bandwidth or bypass the public internet.
  • D. Azure Private Link provides private connectivity to Azure PaaS services, not site-to-site connectivity for an on-premises data center.

Azure ExpressRoute

A service that creates a private, dedicated connection between an on-premises network and Microsoft Azure, bypassing the public internet.

  • Private connection, not over public internet.
  • High bandwidth, low latency.
  • Guaranteed uptime (SLA).
  • Ideal for hybrid cloud scenarios with strict performance/security needs.

Memory trick: ExpressRoute is the 'express lane' to Azure.

More Design infrastructure solutions questions