az-700 Practice Question 2025
Exam: az-700
Domain: Secure network connectivity to Azure resources
Topic: Design and implement virtual network peering security
Difficulty: medium
In a scenario where you need to ensure secure communication between two Azure Virtual Networks (VNs) in different regions without exposing them to the internet, which of the following is the best approach to design your network architecture?
Answer Options
A
Use gateway transit to route traffic between the VNs.
B
Implement virtual network peering between the VNs.
C
Deploy an NVA in both VNs to control traffic flow.
D
Use remote gateways to establish a connection between the VNs.
Correct Answer
B: Implement virtual network peering between the VNs.
Explanation
Virtual network peering allows VN-to-VN communication without the need for internet exposure or additional hardware. Gateway transit involves using a gateway in one VN to route traffic to another VN, while remote gateways use a VNet gateway to connect VNets across regions. An NVA can be used for additional security but does not replace the need for peering or gateways for direct VN communication. Therefore, virtual network peering is the most appropriate solution for secure communication between VNs in different regions.