CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding Azure VPN Gateway for Secure Traffic
Learn why Azure VPN Gateway is crucial for encrypting traffic in Azure. Understand the question and options to ace the AZ-500 exam.
Your company requires that all traffic to and from your Azure resources is encrypted. This specific decision trips candidates because they often confuse the purpose and functionality of Azure networking services.
The question
Your company requires that all traffic to and from your Azure resources is encrypted. Which of the following Azure services can you configure to ensure that all traffic over a VPN connection is encrypted?
A. Azure ExpressRoute
B. VPN Gateway
C. Azure Bastion
D. Azure Firewall
Think before you scroll
Before selecting an answer, consider the primary functions of each service. Focus on which service is explicitly designed for establishing secure, encrypted connections over the internet for Azure resources.
The answer
The correct option is B. VPN Gateway. This service is specifically designed to create secure, encrypted connections for Azure resources, ensuring that all traffic over a VPN connection is encrypted.
Why the other options lose
A. Azure ExpressRoute: This service connects on-premises networks directly to Azure through a private connection. However, it does not encrypt traffic by default, which disqualifies it as a suitable option for ensuring encrypted traffic.
C. Azure Bastion: Azure Bastion provides secure remote access to virtual machines without exposing them to the public internet. While it enhances security, it does not encrypt traffic between sites, making it unsuitable for this requirement.
D. Azure Firewall: This is a cloud-native stateful firewall that protects Azure Virtual Network resources. However, it does not manage VPN connections directly and does not provide the encryption needed for traffic traveling over a VPN.
The concept behind it
Understanding the purpose of each Azure service is crucial. VPN Gateway is specifically tailored for creating encrypted connections, while services like ExpressRoute, Bastion, and Firewall serve different roles in Azure's security architecture. Knowing the specific functionality of each service helps in making informed decisions on the exam.
Exam trap to remember
Remember: VPN Gateway is your go-to for encrypted traffic over VPN connections. Don't confuse it with services that have different core functions.