AZ-900 Describe Azure architecture and services Practice Question
Which Azure networking feature enables resources in different Azure virtual networks to communicate as if they were on the same network?
⚠ Common exam trap
It's easy for candidates to confuse Azure VPN Gateway (which can also connect VNets) with VNet Peering, but VPN Gateway introduces encryption and gateway overhead, while peering is a direct, low-latency connection that does not require a gateway and is the intended solution for same-network-like communication between VNets.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Virtual Network Peering
Azure Virtual Network Peering (Option B) connects two or more Azure virtual networks (VNets) directly using the Microsoft backbone infrastructure, enabling resources in each VNet to communicate with each other as if they were on the same network. Unlike a VPN gateway, peering does not require a public internet hop or encryption overhead, and it supports transitive routing only when explicitly configured via a hub-and-spoke topology. This makes it the correct choice for low-latency, high-bandwidth cross-VNet communication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure VPN Gateway
Why it's wrong here
Azure VPN Gateway can connect VNets using IPsec tunnels over the public internet, but it requires gateway subnets and incurs internet-based latency and bandwidth constraints. Unlike VNet Peering, which uses Azure's backbone with no gateway, VPN Gateway traffic is not confined to the Azure network. Because the question seeks the optimal solution for directly connecting two VNets, VPN Gateway is less direct and not the correct answer.
- ✓
Azure Virtual Network Peering
Why this is correct
Azure Virtual Network Peering directly links two VNets over the Microsoft backbone, enabling private IP address traffic between them without going through the internet or a VPN gateway. It supports cross-region (global) peering and can connect VNets in different subscriptions or Azure Active Directory tenants. This makes it the native, low-latency solution for interconnecting virtual networks within Azure.
- ✗
Azure ExpressRoute
Why it's wrong here
ExpressRoute establishes a dedicated private connection from an on-premises network to Azure, not between two Azure VNets. While it can be combined with VNet Peering for hybrid architectures, it does not provide native VNet-to-VNet connectivity. Since the scenario involves connecting two virtual networks within Azure, ExpressRoute does not serve that purpose.
- ✗
Azure Private Link
Why it's wrong here
Azure Private Link is designed to provide private connectivity to specific Azure PaaS services, such as Storage or SQL Database, by placing a private endpoint in your VNet. It does not connect two complete VNets to each other; instead, it gives your VNet private access to an individual service. For inter-VNet communication, VNet peering is the appropriate mechanism, so Private Link is not a valid choice here.
Go deeper
Related to this question
Learn chapter
Azure Regions and Geographies
Key term
Virtual network
A virtual network is a software-based network that connects computers, servers, and devices over the internet or within a cloud environment, simulating a physical network without requiring dedicated hardware.
Key term
Azure Virtual Network
Azure Virtual Network is a cloud service that lets you create a private, isolated network in the Microsoft Azure cloud, allowing your virtual machines and other resources to communicate securely with each other, the internet, and your on-premises network.
About these practice questions
One of 981 original AZ-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.