Learn how to secure your Azure ExpressRoute connection with encryption. Explore two effective solutions: creating a VPN gateway with private IP addresses and using Azure Virtual WAN with an ExpressRoute gateway. Secure your on-premises to Azure network today.
Table of Contents
Question
You have an on-premises network.
You have an Azure subscription that contains an Azure Virtual Network named Vnet1. Vnet1 contains an ExpressRoute circuit between the on-premises network and VNet1.
You need to recommend a solution to enable encryption over the ExpressRoute circuit.
What are two solutions that you can recommend? Each correct answer presents a complete solution.
A. Create a Network Virtual Appliance (NVA) and configure routing through private peering.
B. Create a VPN gateway with gateway private IP addresses over private peering.
C. Create an Azure virtual WAN with an ExpressRoute gateway and a VPN gateway.
D. Deploy and route all traffic to Azure Firewall.
E. Enable a remote gateway through virtual network peering.
Answer
B. Create a VPN gateway with gateway private IP addresses over private peering.
C. Create an Azure virtual WAN with an ExpressRoute gateway and a VPN gateway.
Explanation
Deploying a VPN gateway with private IP addresses and establishing connectivity from an on-premises device would encrypt the ExpressRoute traffic since traffic from on-premises goes through the ExpressRoute circuit via peering when reaching the private IP address of the Azure gateway.
Designing and Implementing Microsoft Azure Networking Solutions AZ-700 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Designing and Implementing Microsoft Azure Networking Solutions AZ-700 exam and earn Designing and Implementing Microsoft Azure Networking Solutions AZ-700 certification.