Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which type of VPN allows creating a secure connection to your virtual network from an individual client computer?

1. Site-to-Site VPN

2. Point-to-Site VPN

3. ExpressRoute

4. Site-to-Site Gateway

The correct answer is: Point-to-Site VPN

The correct answer is Point-to-Site VPN. This type of VPN is specifically designed to enable a secure connection from an individual client computer directly to a virtual network in Azure. It allows remote users to securely access resources within a virtual network from anywhere on the internet. In a Point-to-Site VPN configuration, the connection is established from a single client device to the Azure virtual network, often using the OpenVPN or SSTP protocols. This setup is particularly beneficial for remote workers or users who need to access the resources of the virtual network without requiring a full site-to-site connection. On the other hand, a Site-to-Site VPN is used to connect entire networks to each other, facilitating communication between two or more networks through a secure connection. ExpressRoute provides a dedicated, private connection that bypasses the public internet for increased security and reliability but does not cater to individual client connections. A Site-to-Site Gateway term usually refers to the component facilitating a Site-to-Site VPN, and it also does not address individual client connectivity needs.