Microsoft Azure Administrator (AZ104) Practice Exam

What is required to establish a connection between different Azure virtual networks?

1. Virtual network peering

2. Site-to-site VPN

3. Network security groups

4. ExpressRoute

The correct answer is: Virtual network peering

Virtual network peering is essential for establishing a connection between different Azure virtual networks. When you peer two virtual networks, they can communicate with each other as if they are part of the same network, enabling resources in one virtual network to access resources in another. This configuration allows for seamless communication without the need for additional gateways or complex routing. It is particularly useful within the same Azure region or across different Azure regions, allowing for connection scenarios that suit various architectural needs. Virtual network peering is characterized by low latency and high bandwidth, making it an efficient way to connect virtual networks. Security is also maintained since traffic remains on the Azure backbone network without being exposed to the public internet. In contrast, other options are used for different networking purposes. A site-to-site VPN connects on-premises networks to Azure and is generally used for hybrid solutions rather than linking two Azure virtual networks directly. Network security groups help manage and enforce traffic rules and are not used for establishing connections between networks. ExpressRoute provides a dedicated connection between on-premises infrastructure and Azure, typically for enterprise-grade connections, but it does not facilitate direct communication between Azure virtual networks like peering does.