AZ-500 Question 57
Single answerYou have two Azure virtual networks, WestUSVNet1 and EastUSVNet2, located in different regions. Your priority is to enable direct communication over the Azure backbone with minimal latency and without routing traffic over the public internet. You also want to keep the solution simple and cost-effective, avoiding on-premises connections. Which solution should you implement to meet these requirements?
- A
Deploy an Azure VPN Gateway in each virtual network and configure a site-to-site VPN tunnel
- B
Configure a Global VNet Peering between WestUSVNet1 and EastUSVNet2
- C
Enable a standard VNet-to-VNet IPsec tunnel leveraging an on-premises router
- D
Set up ExpressRoute to connect both virtual networks privately
Show answer and explanation
Correct answer: B
Explanation
Global VNet Peering directly interconnects VNets in different regions using the Azure backbone, reducing latency and complexity because no additional gateways or on-premises connections are required. It is also more cost-effective than options like ExpressRoute if you only need communication between Azure VNets. For more information, refer to Microsoft documentation on VNet peering (https://learn.microsoft.com/azure/virtual-network/virtual-network-peering-overview).
- A. Incorrect.
Option 1: Deploying VPN Gateways and configuring a site-to-site connection works for secure interconnection, but it depends on public internet routing (even though it is encrypted) and requires additional infrastructure and management overhead. This is more suitable if you also need on-premises connectivity.
- B. Correct.
Option 2: Global VNet Peering is the recommended method to directly connect virtual networks across different Azure regions via the Microsoft backbone network. It offers low latency, doesn't need traffic to traverse the public internet, and simplifies management by avoiding additional gateways.
- C. Incorrect.
Option 3: A standard VNet-to-VNet IPsec tunnel typically requires VPN Gateways and on-premises router interactions. Since you want to avoid on-premises dependencies and minimize complexity, this isn’t an appropriate choice.
- D. Incorrect.
Option 4: ExpressRoute is a private connection that bypasses the public internet, but it is mostly suited for dedicated, high-throughput connectivity to on-premises environments. It is more expensive and not necessary if you only need VNet-to-VNet communication.