Question

A financial services company has provisioned an ExpressRoute circuit to connect their on-premises datacenter to Azure. Their workloads require private connectivity to Azure VMs and Azure SQL Managed Instance over private IP addresses. Additionally, they need to reach Azure PaaS services such as Azure Storage and Azure SQL Database over public endpoints without traffic traversing the public internet. Which ExpressRoute peering configuration should you recommend?

Accepted Answer

Enable Azure private peering for the VMs and Managed Instance, and Microsoft peering for the PaaS public endpoints

Answer

Enable Azure private peering only, and route all PaaS traffic through it using service endpoints

Answer

Enable Microsoft peering only, and use it for both private IP and public endpoint connectivity

Answer

Enable ExpressRoute Global Reach to connect to PaaS public endpoints privately