Planning and Administering Microsoft Azure for SAP Workloads — Question 15

You have an SAP environment on Azure.

Your on-premises network uses a 1-Gbps ExpressRoute circuit to connect to Azure. Private peering is enabled on the circuit. The default route (0.0.0.0/0) from the on-premises network is advertised.

Whenever backups are copied to Azure Blob storage, the ExpressRoute circuit is saturated.

You need to resolve the issue without modifying the ExpressRoute circuit. The solution must minimize administrative effort.

What should you do?

Answer options

• A. Create a user-defined route that redirects traffic to the Blob storage
• B. Create an application security group
• C. Change the backup solution to use a third-party software that can write to the Blob storage
• D. Enable virtual network private endpoints.

Correct answer: D

Explanation

Enabling virtual network private endpoints allows secure access to Azure Blob storage directly over the Azure backbone, which alleviates congestion on the ExpressRoute circuit by routing data internally. The other options either do not address the saturation issue effectively or require more administrative overhead, such as changing software or creating new routing configurations.