Question
You are planning an Azure deployment that will contain three virtual networks in the East US Azure region as shown in the following table.
| Name | Description |
|---|---|
| Vnet1 | Hub virtual network for shared services |
| Vnet2 | Virtual machines for the IT department |
| Vnet3 | Virtual machines for the research department |
A Site-to-Site VPN will connect Vnet1 to your company's on-premises network.
You need to recommend a solution that ensures that the virtual machines on all the virtual networks can communicate with the on-premises network. The solution must minimize costs.
What should you recommend for Vnet2 and Vnet3?
- A. VNet-to-VNet VPN connections
- B. peering Correct
- C. service endpoints
- D. route tables
Explanation
Peer Vnet2 and Vnet3 with the hub Vnet1, allow gateway transit on the hub side and enable use of the remote gateway on the spokes; the spokes then reach on-premises through Vnet1's VPN gateway without needing their own gateways. VNet-to-VNet VPN connections would require a VPN gateway in each spoke, which costs more. Service endpoints only secure access to Azure PaaS services, and route tables alone cannot connect separate virtual networks.
