A municipal yard has no ExpressRoute and must send lock telemetry into a hub VNet over the Internet. Which connectivity path should the security engineer plan?
Select an answer to reveal the explanation.
Short Explanation
On-prem isn’t an Azure VNet, so peering won’t stretch to the yard. Stand up a site-to-site VPN into the hub and ride IPsec over the Internet.
Full Explanation
VNet peering connects Azure virtual networks; it does not by itself provide connectivity to an on-premises site. Without ExpressRoute, a VPN gateway (site-to-site) is the appropriate hybrid path into the hub. Private Link exposes Azure/paas or custom services privately inside Azure networking models but does not replace a hybrid VPN when the partner network is on-premises over the Internet. Exposing VMs on public IPs without a tunnel fails the secure connectivity intent.