Microsoft Azure Administrator — Question 126

You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. VNet1 has a VPN gateway that uses static routing,

The on-premises network has a VPN connection that uses the VPN gateway of VNet1.

You need to configure access for users on the on-premises network to connect to a virtual machine on VNet2. The solution must minimize costs.

Which type of connectivity should you use?

Answer options

• A. Azure Firewall with a private IP address
• B. service chaining and user-defined routes (UDRs)
• C. Azure Application Gateway
• D. ExpressRoute circuits to VNet2

Correct answer: B

Explanation

The correct answer is B because using service chaining and user-defined routes (UDRs) will allow you to effectively route traffic from the on-premises network to VNet2 without incurring the higher costs associated with dedicated circuits like ExpressRoute. The other options, such as Azure Firewall and Application Gateway, are not designed for this specific type of low-cost connectivity between the two virtual networks.