Question

A financial services company already has an Azure ExpressRoute circuit terminating at a partner colocation facility. They now need to reach Microsoft 365 and Azure PaaS services (such as Azure Storage public endpoints) over their private ExpressRoute connection instead of the internet, while still using their existing IaaS VNet peering. The network team must configure the correct peering type for the SaaS and PaaS traffic. Which ExpressRoute peering type should be enabled to carry the Microsoft 365 and Azure public-service traffic?

Accepted Answer

Microsoft peering, which advertises Microsoft public IP prefixes for SaaS and PaaS services

Answer

Azure private peering, which advertises the VNet address space to the on-premises routers

Answer

Azure public peering, which is required for all PaaS endpoints in current deployments

Answer

A dedicated site-to-site IPsec VPN tunnel running over the ExpressRoute private peering