AZ104-Q: VNet peering vs VPN gateway
Q: Two VNets in different regions must communicate privately over Microsoft’s backbone with no cost for ingress/egress data transfer between them. Which should you use?
- A) Site-to-Site VPN Gateway
- B) ExpressRoute
- C) Global VNet peering ✓
- D) Public IP on each VM
Answer: C — VNet peering (Global VNet peering). VNet peering connects VNets over Microsoft’s backbone with private, low-latency traffic — no gateway required and no data-transfer cost between peered VNets in any region (Global peering is supported cross-region). A VPN gateway is for connecting to on-premises or VNet-to-VNet over the internet; ExpressRoute is premium private connectivity. Peering is the correct answer for private, cost-efficient VNet-to-VNet traffic.
Why it helps
Peering (esp. global/cross-region) is a frequent AZ-104 construct; remember peering needs no gateway and has no data-transfer egress cost.