Microsoft Azure Administrator (AZ104) Practice Exam

What must be configured to connect Azure web portals to on-premises resources?

1. Virtual Network Gateway

2. Service endpoints for Azure services

3. Hybrid connections for App Service

4. Azure ExpressRoute

The correct answer is: Virtual Network Gateway

To connect Azure web portals to on-premises resources, configuring a Virtual Network Gateway is essential because it facilitates secure communication between Azure cloud environments and on-premises networks. The Virtual Network Gateway serves as a central point for establishing VPN connections, allowing Azure services, such as web apps running in Azure App Services, to access resources that are hosted locally. This gateway provides the necessary infrastructure to establish either site-to-site VPN connections or Point-to-Site connections. By doing so, it ensures that data transmitted between Azure and on-premises resources is secured and that the applications in Azure can seamlessly interact with the on-premises databases, servers, or other resources. The other options, while related to connectivity, serve different purposes. Service endpoints are designed to provide secure and direct connectivity to Azure services but do not establish a connection to on-premises resources. Hybrid connections enable Azure App Services to use on-premises resources; however, they require additional configuration and are limited in terms of supported connections compared to the breadth of capabilities offered by a Virtual Network Gateway. Azure ExpressRoute facilitates a dedicated connection to Azure but is typically used for large-scale infrastructures and does not replace the needs that a Virtual Network Gateway fulfills for connecting web portals to on-premises resources.