SC-100 Practice Question 3988
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: easy
In designing network encryption between two Azure Virtual Networks connected via VNet Peering, how does Azure handle data in transit across the Azure global backbone?
Answer Options
A
Encrypted automatically across the backbone via MACsec / physical link encryption
B
Transmitted in unencrypted cleartext across public internet wires
C
Requires manual configuration of IPsec tunnels on every VM
D
Stored temporarily on unencrypted proxy servers in transit
Correct Answer
A: Encrypted automatically across the backbone via MACsec / physical link encryption
Explanation
All inter-VNet traffic traversing the Azure global backbone network is automatically encrypted at the physical data link layer (MACsec / IEEE 802.1AE) without requiring VPN gateways.