A botanical garden needs the whole on-premises yard always connected to Azure, and a few traveling inspectors also need laptop tunnels. How should the security engineer split the VPN patterns?
Select an answer to reveal the explanation.
Short Explanation
Yard stays planted—site-to-site. Inspectors roam—point-to-site. Don’t make one VPN pattern do both jobs or invent peering to kitchen routers.
Full Explanation
Site-to-site VPN provides continuous connectivity between an on-premises network and Azure. Point-to-site VPN serves individual user devices such as traveling laptops. Using only one pattern for both needs either leaves remote users without a clean path or overbuilds the yard connection. VNet peering does not connect arbitrary home routers to Azure as a substitute for VPN.