Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which type of connection is private and does not go over the internet?

1. Site-to-Site VPN

2. Point-to-Site VPN

3. Azure ExpressRoute

4. Public Load Balancer

The correct answer is: Azure ExpressRoute

Azure ExpressRoute is a service that enables you to create a private connection between your on-premises infrastructure and Azure data centers. This connection does not traverse the public internet, which offers increased security and performance. By using ExpressRoute, companies can transfer data securely while ensuring lower latency and more reliable connections compared to a typical internet connection. In contrast, Site-to-Site and Point-to-Site VPN connections are established over the internet. Although they provide encrypted tunnels for secure data transmission, they still utilize the public internet, making them less ideal for scenarios where maximum performance and security are necessary. A Public Load Balancer, on the other hand, distributes incoming traffic across multiple servers but operates entirely over the internet, enabling access to resources from external networks. Thus, Azure ExpressRoute stands out as the solution that specifically facilitates secure, private connections without relying on the internet.