AZ-104 Question 198
Single answerYour organization has two virtual networks in different subscriptions within the same Azure region. You need to enable direct communication between these networks for internal traffic while ensuring that the traffic remains private and does not travel over the internet. Which approach should you implement?
- A
Create a public load balancer for each virtual network to forward requests
- B
Configure virtual network peering between the two networks
- C
Establish an Azure site-to-site VPN connection
- D
Implement an ExpressRoute connection through a circuit provider
Show answer and explanation
Correct answer: B
Explanation
Virtual network peering is the simplest and most secure solution for connecting two Azure VNets in the same region, ensuring traffic remains on the Azure backbone without leaving the internal Azure infrastructure.
- A. Incorrect.
A public load balancer is for routing traffic from the public internet to resources in a virtual network, which does not achieve private VNet-to-VNet connectivity.
- B. Correct.
Virtual network peering connects two Azure virtual networks through the Azure backbone, ensuring traffic remains private and does not traverse the public internet.
- C. Incorrect.
A site-to-site VPN would traverse the public internet and require public endpoints, which does not guarantee end-to-end private connectivity within Azure.
- D. Incorrect.
ExpressRoute is designed for private connections between on-premises networks and Azure. It is more complex and costly if both virtual networks are already in Azure.