Fundamental
Prepare and test your skills
Fundamental
Prepare and test your skills
Azure ExpressRoute for Private Hybrid Cloud Connections
Free sample question, answered and explained below. The AZ-900 Microsoft Azure Fundamentals Exam practice bank has 688 more like it. Try 10 free: instant score, no account.
An enterprise operates an internal line-of-business application within its on-premises datacenter and is migrating related database services to Microsoft Azure. To establish a hybrid cloud model, the enterprise requires a dedicated, private connection between its on-premises network and Azure resources that does not travel over the public internet.
Which Azure service should the enterprise implement?
Explanations
Azure DNS
Azure DNS
What Azure DNS does
Azure DNS is a hosting service for Domain Name System (DNS) domains that provides name resolution using Microsoft Azure infrastructure. It enables organizations to manage their authoritative DNS records in the cloud.
Why it doesn't meet the requirement
While Azure DNS is critical for resolving domain names to IP addresses across public and private networks, it does not provide underlying physical or logical network connectivity. It cannot establish a private, dedicated transmission path between an on-premises datacenter and Azure.
Key characteristics and limitations
- Name resolution only: Translates human-readable domain names into machine-readable IP addresses.
- No data transport: Does not carry application payload traffic or establish network links between disparate environments.
- Global reach: Relies on Microsoft's global network of Anycast name servers to answer DNS queries quickly.
This answer would be correct if
The organization needed to host public or private DNS zones in Azure to translate server hostnames into IP addresses for internal and external workloads.
Azure ExpressRoute
Azure ExpressRoute
What Azure ExpressRoute is
Azure ExpressRoute is a networking service that allows organizations to create private, dedicated connections between their on-premises infrastructure or datacenters and Microsoft cloud services, including Microsoft Azure and Microsoft 365.
How it meets the requirements
ExpressRoute fulfills the scenario's requirements by establishing a direct, high-bandwidth connection through a connectivity provider. Because traffic routed over Azure ExpressRoute does not travel across the public internet, it provides reliable, low-latency, and secure data exchange between the local private infrastructure and Azure public cloud resources to form an integrated hybrid cloud environment.
Key advantages and capabilities
- Private routing: Bypasses the public internet entirely to ensure heightened privacy and predictable network performance.
- High throughput and low latency: Supports connection speeds ranging from 50 Mbps up to 100 Gbps, making it ideal for large-scale data transfers and real-time enterprise workloads.
- Layer 3 connectivity: Leverages industry-standard Border Gateway Protocol (BGP) to dynamically exchange routes between on-premises networks and Azure virtual networks.
- Redundancy and reliability: Built with dual physical connections to two Microsoft Enterprise edge routers (MSEEs) at an ExpressRoute location for high availability.
Why this is optimal
Compared to internet-based VPN solutions, Azure ExpressRoute delivers superior reliability, faster speeds, consistent latencies, and enterprise-grade security, making it the premier choice for interconnecting on-premises datacenters with Azure in a hybrid cloud model.
Azure Content Delivery Network (CDN)
Azure Content Delivery Network (CDN)
What Azure Content Delivery Network is
Azure Content Delivery Network (CDN) is a globally distributed network of servers designed to efficiently deliver high-bandwidth web content to users by caching static assets at strategic physical nodes closer to end users.
Why it doesn't meet the requirement
Azure CDN is built for accelerating the delivery of public-facing web content, such as videos, images, and script files, over the public internet. It does not provide private network connectivity between on-premises corporate infrastructure and Azure Virtual Networks.
Key characteristics and limitations
- Edge caching: Stores cached content close to users to reduce latency and bandwidth usage.
- Public internet dependent: Content distribution occurs over public internet routes rather than private connections.
- Optimized for static content: Best suited for static asset acceleration rather than bidirectional hybrid infrastructure integration.
This answer would be correct if
The enterprise needed to reduce latency for global public website visitors by caching media assets and web content closer to user locations.
Azure Bastion
Azure Bastion
What Azure Bastion is
Azure Bastion is a fully managed Platform as a Service (PaaS) that provides secure and seamless Remote Desktop Protocol (RDP) and Secure Shell (SSH) access to virtual machines directly through the Azure portal over Transport Layer Security (TLS).
Why it doesn't meet the requirement
Azure Bastion is designed specifically for administrative management of individual virtual machines without exposing them to public IP addresses. It does not establish network-to-network or site-to-site data plane connectivity for application communication between an on-premises datacenter and cloud resources.
Key characteristics and limitations
- Administrative access tool: Provides browser-based RDP and SSH sessions directly inside the Azure management portal.
- No public IP required on VMs: Protects target VMs from port scanning and internet-based attacks.
- Point-to-host scope: Functions as a jump host for administrators rather than a network interconnect for enterprise workloads.
This answer would be correct if
System administrators required a secure, browser-based method to connect to individual Azure virtual machines using SSH or RDP without assigning public IP addresses to those VMs.
Try 10 interactive questions like this one, free
Answer them yourself and get your score the moment you finish. No account needed.
Full access includes
- 688 practice questions across all 3 exam domains
- Every answer explained: why it is right, and why the others are not
- Scout, an AI tutor that answers your follow-up questions
- Readiness tracking by domain, so you know when to book the exam
Related questions
Keep the momentum going with these hand-picked practice scenarios
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Hybrid Cloud Model
Define cloud models, including public, private, and hybrid
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Azure Dedicated Host
Define cloud models, including public, private, and hybrid
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Hybrid Cloud
Define cloud models, including public, private, and hybrid
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Hybrid Cloud
Define cloud models, including public, private, and hybrid
FundamentalAZ-900 Microsoft Azure Fundamentals Exam
Public Cloud
Define cloud models, including public, private, and hybrid
AdvancedAZ-104 Microsoft Azure Administrator Exam
Availability Zones High Availability
Deploy virtual machines to availability zones and availability sets
Last updated Validated