AZ-700 Question 119
Select 2You have set up an Azure ExpressRoute circuit for your organization to provide private connectivity from your on-premises data center to Azure. Currently, you have configured only a single private peering to connect your on-premises network to Azure virtual networks. Your organization now wants to route traffic to Office 365 services over the same ExpressRoute connection. Which two actions should you take to achieve this goal?
- A
Enable Microsoft peering on the same ExpressRoute circuit and configure an appropriate route filter for Office 365 prefixes.
- B
Migrate your configuration entirely from private peering to Microsoft peering to support the Office 365 connection.
- C
Create a route filter for private IP address prefixes used by your Azure virtual networks.
- D
Configure both private peering for your virtual networks and Microsoft peering for Office 365 on the same ExpressRoute circuit.
- E
Enable Azure ExpressRoute Global Reach so that Office 365 traffic is automatically routed over the ExpressRoute circuit.
Show answer and explanation
Correct answers: A, D
Explanation
To route traffic to both private workloads in Azure and Office 365 services using a single ExpressRoute circuit, you need to configure two separate peerings: private peering for Azure VNets and Microsoft peering for Office 365. You then apply route filters to Microsoft peering to include only the necessary Office 365 prefixes. Refer to official Microsoft documentation on Azure ExpressRoute peerings for detailed guidance on setting up multi-peering configurations.
- A. Correct.
Correct. Azure ExpressRoute supports multiple peerings on a single circuit: private peering for private Azure services and Microsoft peering for services like Office 365. You must enable Microsoft peering and then apply a route filter to allow traffic only to the necessary Office 365 prefixes.
- B. Incorrect.
Incorrect. You do not need to abandon your existing private peering. It is possible and recommended to use both private and Microsoft peerings on the same ExpressRoute circuit if you need to reach both private Azure resources and Office 365 applications.
- C. Incorrect.
Incorrect. Route filters for private IP addresses are not applicable for connecting to Office 365. Office 365 traffic must be configured under Microsoft peering with the correct route filters for public IP prefixes, not private IP addresses.
- D. Correct.
Correct. You can configure separate peerings under the same ExpressRoute circuit. Private peering handles traffic to Azure virtual networks, while Microsoft peering handles traffic to Microsoft services such as Office 365. This allows you to maintain both connections simultaneously.
- E. Incorrect.
Incorrect. Azure ExpressRoute Global Reach is used to connect multiple on-premises sites through Azure's network; it does not automatically route Office 365 traffic. Office 365 access requires Microsoft peering and specific route filters.