AZ-305 Design infrastructure solutions Practice Question
A company has multiple branch offices and needs to connect them to Azure and to each other using a scalable, managed solution that simplifies network architecture. The solution should support automatic routing and integration with ExpressRoute and VPN. Which Azure service should they use?
⚠ Common exam trap
Many candidates confuse Azure Virtual WAN with Azure Virtual Network, thinking that a simple VNet with VPN gateways can scale to interconnect multiple branches, but they overlook the managed, automatic routing and aggregation capabilities that Virtual WAN provides for multi-site topologies.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Virtual WAN
Azure Virtual WAN is a managed networking service that aggregates branch, VPN, and ExpressRoute connectivity into a single hub-and-spoke architecture. It automatically handles routing between branches and Azure, supports any-to-any connectivity, and integrates natively with ExpressRoute and VPN gateways, making it the correct choice for a scalable, managed solution that simplifies network architecture.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Virtual Network
Why it's wrong here
Azure Virtual Network (VNet) is a foundational networking component that provides isolation and segmentation for Azure resources, but it does not include any built-in managed connectivity for branch offices. Connecting on-premises sites to a VNet requires deploying separate VPN Gateways or ExpressRoute circuits and then manually configuring peering and user-defined routes for every branch. Because VNets lack an integrated hub or automatic routing logic, they are a building block, not a complete multi-site connectivity solution.
- ✓
Azure Virtual WAN
Why this is correct
Azure Virtual WAN is a managed networking service that creates a hub-and-spoke architecture with integrated routing, automatically interconnecting branches, Azure VNets, and on-premises locations. It natively supports Site-to-Site VPN, Point-to-Site VPN, and ExpressRoute, and it performs automatic route table generation and propagation across all spokes. Virtual WAN also enables branch-to-branch connectivity without manual peering, making it the only option here that delivers a scalable, zero-touch global transit network.
- ✗
Azure ExpressRoute
Why it's wrong here
ExpressRoute provides a private, high-bandwidth, low-latency dedicated connection from a single on-premises location to Azure, bypassing the public internet, but it does not provision any connectivity between branch offices or between branches and Azure beyond that one circuit. Each branch would need its own ExpressRoute circuit or an aggregation router, and branch-to-branch traffic still requires a routing infrastructure such as Virtual WAN to forward packets. ExpressRoute alone cannot serve as a hub for automatic multi-site routing because it only offers point-to-point connectivity to the Microsoft edge.
- ✗
Azure VPN Gateway
Why it's wrong here
VPN Gateway establishes an IPsec Site-to-Site (S2S) VPN tunnel between one on-premises network and a specific Azure VNet, but it is not designed to aggregate multiple branch offices into an automated topology. To interconnect several branches, you must deploy multiple VPN gateway connections or configure complicated IPsec tunnels between branch devices, and you still need manual routing or a VPN concentrator to enable branch-to-branch communication. Since VPN Gateway lacks the managed hub with automatic routing and propagation that Virtual WAN provides, it is insufficient for a multi-branch environment.
Go deeper
Related to this question
About these practice questions
This AZ-305 question is part of Courseiva's 212-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.