AZ-900 Practice Question 45: Vnet Peering
Microsoft Azure Fundamentals (AZ-900) · Test 5 · question 5 of 10
Two teams each run an Azure virtual network in the same region. Their virtual machines now need to reach each other with low latency, over private addresses, without traffic crossing the public internet and without deploying a gateway. What should be configured?
Show answer and explanation
Answer:
Peering connects two or more virtual networks so they appear as one for connectivity purposes, giving a low-latency, high-bandwidth connection between resources in each. The documentation is explicit about the constraints in the stem: network traffic between peered virtual networks is private, it is kept on the Microsoft backbone network, and "no public internet, gateways, or encryption are required." Creating the peering causes no downtime, and *global* virtual network peering does the same job across regions.
Option B would work but violates the stated constraints; a site-to-site VPN needs a VPN gateway and encrypts traffic over the internet, adding cost and latency for no benefit here. Option C, ExpressRoute, is a private circuit ordered through a connectivity partner to link an on-premises network to Azure; it is not the mechanism for joining two Azure virtual networks. Option D would push the traffic out over the public internet, which is exactly what the stem forbids, and would expose every VM in the process.
Reference: Azure Virtual Network peering