複数の Windows Server および Ubuntu Linux 仮想マシン (VM) が 2 つの仮想ネットワーク (VNet) に分散されています。 - prod-vnet-west (米国西部リージョン) - prod-vnet-east (米国東部リージョン) どちらの VNet 内の VM も、Azure バックボーン ネットワークのみを使用して接続し、リソースを共有できるようにする必要があります。 ソリューションでは、コスト、複雑さ、展開時間を最小限に抑える必要があります。 何をすべきでしょうか?
正解:B
You should configure peering between prod-vnet-west and prod-vnet-west. Peering enables VMs located on two different Azure VNets to be grouped logically together and thereby connect and share resources. Traditional VNet peering involves two VNets located in the same region. However, global VNet peering, generally available in summer 2018, supports VNets distributed across any Azure public region. You should not deploy a VNet-to-VNet VPN. First, global VNet peering means that you are no longer required to use a VPN gateway to link VNets located in different Azure regions. Second, the scenario requires that you minimize cost and complexity. You should not create a private zone in Azure DNS. This action would be necessary for resources in peered VNets to resolve each other's DNS host names. However, the scenario makes no requirement for private host name resolution. You should not add a service endpoint to each VNet. Service endpoints allow you to limit access to certain Azure resources, such as storage accounts and Azure SQL databases, to resources located on a single VNet. Thus, this feature cannot be used to link two VNets as the scenario mandates.