Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 6 question 22 discussion

Actual exam question from Microsoft's AZ-301

Question #: 22
Topic #: 6

You manage on-premises networks and Azure virtual networks.
You need a secure private connection between the on-premises networks and the Azure virtual networks. The connection must offer a redundant pair of cross connections to provide high availability.
What should you recommend?

A. ExpressRoute
B. Azure Load Balancer
C. virtual network peering
D. VPN Gateway

Show Suggested Answer

Suggested Answer: A 🗳️

by IMBA22 at April 13, 2020, 6:19 a.m.

Comments

Submit Cancel

gops84

Highly Voted 5 years ago

A is correct ExpressRoute does not support router redundancy protocols such as hot standby routing protocol (HSRP) and virtual router redundancy protocol (VRRP) to implement high availability. Instead, it uses a redundant pair of BGP sessions per peering. To facilitate highly-available connections to your network, Azure provisions you with two redundant ports on two routers (part of the Microsoft edge) in an active-active configuration.

upvoted 14 times

Thespy45

4 years, 10 months ago

Answer from Microsoft : redundant pair of cross connections to provide high availability : https://docs.microsoft.com/en-us/azure/expressroute/expressroute-faqs#are-connections-to-expressroute-redundant

upvoted 3 times

exams0123456

4 years, 9 months ago

There is a difference between: being redundant and connecting cross-pairs. ExpressRoute does provide redundancy but Cross-pairing is only possible with VPN where there two VPN devices on-premise and a VPN Gateway in Azure (with Active-Active Gateway instance). Hence VPN gateway is correct answer.

upvoted 2 times

tmurfet

4 years, 9 months ago

I agree, it's a Virtual "Private" Network aka VPN. A VPN is a private connection from a public network. Key word in the question is "secure" -- ExpressRoute connections are not encrypted, VPNs are encrypted. IMHO just because ExpressRoute uses private telco/ISP resources doesn't make it more secure than IPSec encrypted VPN.

upvoted 1 times

tmurfet

4 years, 9 months ago

Changing my answer to ExpressRoute as they are indeed redundant using a pair of cross connections: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-faqs#are-connections-to-expressroute-redundant

upvoted 3 times

...

IHensch

Most Recent 4 years, 4 months ago

Correct answer is ExpressRoute, because It contains the entire solution for connecting two locations and VPN Gateway is just a Resource

upvoted 1 times

...

lodalasan

4 years, 4 months ago

https://docs.microsoft.com/en-us/azure/expressroute/media/expressroute-circuit-peerings/expressroute-basic.png

upvoted 1 times

...

glam

4 years, 4 months ago

A. ExpressRoute

upvoted 1 times

...

sanketshah

4 years, 5 months ago

A is ccorrect.

upvoted 2 times

...

fimo

4 years, 9 months ago

Correct answer is D. ER do not provide a secure connection (data is not encrypted in transit). The option should be VPN (not a VPN Gateway - God bless Microsoft exam authors).

upvoted 2 times

...

supershysherlock

5 years, 2 months ago

The answer should be D https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

upvoted 2 times

Mokaw

5 years, 2 months ago

In question, you have "a private connection," only ExpressRoute gives you the possibility to create a private connection.

upvoted 27 times

JakeCallham

5 years, 1 month ago

I agree with mokaw, the keyword here is private.

upvoted 3 times

...

jivom

4 years, 10 months ago

Agreed, and the second key thing is high availability which cannot always be guaranteed when the VPN travels over the internet over various nodes. ExpressRoute is dedicated (high available to you) and fully private.

upvoted 2 times

...