A bank requires a dedicated private connection between its on-premises datacenter and Azure that does NOT traverse the public internet. Which service provides this?
A.Azure VPN Gateway
VPN Gateway encrypts traffic over the public internet — fails the 'not over internet' requirement.
B.Azure ExpressRoute
ExpressRoute = private dedicated circuit via a provider. Correct.
C.Azure DNS
DNS is name resolution, not connectivity.
D.Virtual network peering
Peering connects two Azure VNets — not on-premises to Azure.
Why this answer
ExpressRoute provides private dedicated connectivity via connectivity providers — traffic never touches the public internet, offering consistent bandwidth/latency. VPN Gateway also connects on-prem to Azure but DOES traverse the internet (encrypted).
Correct answer: B · Last reviewed 2026-02-13
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Core Azure Services practice session.
Practice Core Azure Services