Question

A retail company operates 45 branch sites and wants to connect them to workloads hosted in three Azure regions. They need centralized, hub-based routing and automated any-to-any branch connectivity over the public internet without provisioning a dedicated private circuit. Cost sensitivity is high, and they want Microsoft to manage the underlying transit infrastructure. Which internet-based connectivity approach best meets these requirements?

Accepted Answer

Deploy Azure Virtual WAN with a VPN gateway in each hub and connect branches using Site-to-Site IPsec VPN over the internet

Answer

Provision an Azure ExpressRoute circuit in each region and peer the branches through a partner exchange provider

Answer

Configure a single Azure VNet with a Point-to-Site VPN gateway and connect all 45 branch routers as individual clients

Answer

Deploy separate standalone VNets per region and manually configure VNet peering plus per-site IPsec tunnels between each pair