A county wants private dedicated connectivity from its fiber provider into Azure rather than a VPN over the public internet. Which service matches that purpose?
Select an answer to reveal the explanation.
Short Explanation
Private dedicated pipe into Azure means ExpressRoute — not a VPN riding the public internet. App Service and cool storage do not sell you a fiber circuit. Dedicated private connectivity points to ExpressRoute.
Full Explanation
Azure ExpressRoute provides private dedicated connectivity from an on-premises network via a connectivity provider into Microsoft’s network, avoiding a VPN that traverses the public internet. A county that wants that private fiber-style path into Azure is selecting ExpressRoute for purpose, not VPN Gateway. VPN Gateway is the internet-based encrypted hybrid option; it is not “always a private fiber circuit” and should not be confused with dedicated ExpressRoute connectivity. App Service plans define compute capacity for web apps; they do not provision dedicated WAN circuits into regions. Cool blob tier is an infrequent-access object storage tier, unrelated to provisioning fiber paths for hybrid networking. ExpressRoute is about how packets enter Azure privately, not about hosting application code by itself. Exam caveat: ExpressRoute improves privacy and often path predictability, but it is not automatically a substitute for application encryption and identity controls—defense in depth still applies. Operational check: validate circuit provisioning status with the provider, confirm the relevant peering is up, and test throughput and latency from county datacenter subnets to Azure workloads before decommissioning interim VPN paths.