AZ-700 Question 121
Single answerA multinational financial institution needs a dedicated 10 Gbps connection to Microsoft Azure from their on-premises data center. They already have rack space in a carrier-neutral facility that has a direct Microsoft presence. Security and latency requirements are strict, and they plan to scale bandwidth beyond 10 Gbps in the future. Which ExpressRoute connectivity model should they choose to best meet these requirements?
- A
Use an ExpressRoute partner connection via an MPLS VPN provider
- B
Leverage an ExpressRoute public peering connection for Internet-based access
- C
Establish an ExpressRoute Direct circuit in the co-location facility
- D
Deploy a site-to-site VPN tunnel instead of ExpressRoute
Show answer and explanation
Correct answer: C
Explanation
ExpressRoute Direct provides a dedicated, high-throughput, low-latency connection directly from the on-premises environment into Azure. It is especially advantageous for enterprises needing 10 Gbps or more, strict performance requirements, and the ability to scale quickly. According to official Microsoft documentation, ExpressRoute Direct is designed for customers co-located at a cloud exchange/Edge site and requiring dedicated port capacity that can be expanded on demand.
- A. Incorrect.
Option 1: This approach relies on a partner (MPLS VPN provider) to connect to Azure. While it can be suitable for many scenarios, it limits direct control over large bandwidth upgrades (e.g., beyond 10 Gbps) and adds a middle layer for traffic management, which might not meet the institution� strict latency and future expansion plans as effectively as a direct connection.
- B. Incorrect.
Option 2: Public peering (now consolidated under Microsoft Peering) is often used to access Microsoft services like Azure PaaS and SaaS offerings over the public endpoint, not for private connectivity to virtual networks. Furthermore, it does not provide a fully dedicated circuit for private resources or the guaranteed performance associated with a direct circuit.
- C. Correct.
Option 3: ExpressRoute Direct is the best fit for this scenario. It allows the institution to establish a dedicated 10 Gbps (and higher) circuit directly with Microsoft in their co-location facility where Microsoft Edge is present. This model provides low latency, enhanced security, and flexibility for future bandwidth scaling without going through a third-party MPLS provider.
- D. Incorrect.
Option 4: Site-to-site VPNs are encrypted tunnels over the public Internet and typically not intended for dedicated high-bandwidth or low-latency scenarios. They do not meet the reliability or performance guarantees that ExpressRoute provides.