Microsoft Azure Fundamentals (AZ-900)Describe Azure architecture and servicesHard

A company has a hybrid cloud environment and needs to ensure that users accessing resources in Azure from their on-premises network have a consistent and predictable network performance. They also need to transfer large volumes of data securely and reliably. Which Azure networking service is designed to meet these specific requirements for connecting on-premises networks to Azure?

  1. AAzure VPN Gateway
  2. BAzure DNS
  3. CAzure ExpressRoute
  4. DAzure Virtual Network
Show answer & explanation

Correct answer: C. Azure ExpressRoute

Azure ExpressRoute provides a private, dedicated connection between an on-premises network and Azure datacenters. Unlike a VPN Gateway which uses the public internet, ExpressRoute offers higher bandwidth, lower latency, and guaranteed consistent network performance, making it ideal for transferring large volumes of data securely and reliably in hybrid scenarios.

Why the other options are wrong

  • A. Azure VPN Gateway uses encrypted tunnels over the public internet, which can have variable performance and is less suitable for very large data transfers with strict performance needs.
  • B. Azure DNS manages domain name resolution and is not a service for network connectivity between on-premises and Azure.
  • D. Azure Virtual Network is for isolating resources within Azure and does not directly provide a dedicated on-premises to Azure connection with guaranteed performance.

Azure ExpressRoute

A service that provides a dedicated, private connection between your on-premises infrastructure and Azure datacenters.

  • Private connection, not over the public internet.
  • Higher bandwidth, lower latency, and consistent performance.
  • Ideal for hybrid cloud, large data transfers, and critical applications.

Memory trick: ExpressRoute is the 'Fast Lane' to Azure.

More Describe Azure architecture and services questions