AZ-305 Question 231
Single answerYour company plans to migrate a mission-critical application to Azure. The on-premises environment generates large volumes of data that must be transferred to Azure with minimal latency and guaranteed bandwidth. Additionally, the team wants a private connection that does not traverse the public Internet for security and regulatory reasons. Which connectivity solution best meets these requirements?
- A
Provision an Azure ExpressRoute circuit with a supported connectivity provider.
- B
Configure a Site-to-Site VPN using an Azure VPN Gateway in route-based mode.
- C
Set up a Point-to-Site VPN for each endpoint requiring on-premises access to Azure.
- D
Use Azure Private Link for all network traffic, including general data transfer.
Show answer and explanation
Correct answer: A
Explanation
ExpressRoute is Microsoft’s recommended solution for enterprises that need secure, high-throughput, and consistent connectivity between on-premises environments and Azure without using the public Internet. According to Microsoft documentation, ExpressRoute connections offer higher reliability, faster speeds, and lower latencies compared to typical VPN connections. Reference: Microsoft Docs, ExpressRoute Overview (https://learn.microsoft.com/azure/expressroute/expressroute-introduction).
- A. Correct.
Option 1 (Correct): ExpressRoute provides a dedicated, private connection from on-premises to Azure that does not traverse the public Internet. It offers higher throughput, predictable performance, and SLA-backed availability, making it ideal for large data transfer and mission-critical applications.
- B. Incorrect.
Option 2 (Incorrect): While a Site-to-Site VPN with an Azure VPN Gateway can securely connect on-premises networks to Azure, it uses the public Internet and does not guarantee the same level of performance or latency as ExpressRoute. It also lacks guaranteed bandwidth and may not meet strict regulatory needs for private connectivity.
- C. Incorrect.
Option 3 (Incorrect): A Point-to-Site VPN is designed for individual client devices connecting to Azure, typically suitable for remote workers or small-scale scenarios. It does not address high-volume, enterprise-level transfers or guarantee bandwidth for mission-critical workloads.
- D. Incorrect.
Option 4 (Incorrect): Azure Private Link is a service that provides private access to specific PaaS resources in Azure over a private IP, but it does not facilitate broad network connectivity for large data transfers in the same manner as ExpressRoute. It’s used to privately connect to specific services rather than providing a dedicated, high-bandwidth connection from on-premises.