Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub

Correct Answers: A and D

Site-to-site and Outbound NAT are two supported methods for connecting virtual networks in Azure Stack Hub to virtual networks in Azure.

Option A is correct.

Site-to-site is a supported method that represents a virtual private network (VPN) connection over IPsec (IKE v1 and IKE v2)

Option B is incorrect.

Service Principal is the connection method while upgrading the App Service on Azure Stack Hub.

Option C is incorrect.

Inbound NAT is not a method to connect virtual networks in Azure stack Hubs to virtual networks in Azure.

Option D is correct.

By default, all VMs in Azure Stack Hub are connected to external networks through outbound NAT.

Reference:

To know more about Datacenter integration planning considerations for Azure Stack Hub integrated systems, please visit the below-given link:

In a hybrid cloud scenario, where you want to connect virtual networks in Azure Stack Hub to virtual networks in Azure, there are multiple methods available for connecting the Azure Stack Hub to Azure.

The two valid methods from the given list to connect the Azure Stack Hub to Azure are:

A. Site-to-site: This method creates a secure and encrypted connection between the on-premises network and the Azure virtual network. Site-to-site VPN provides a way to extend the on-premises network to Azure, enabling secure communication between the resources in Azure and the on-premises network. Site-to-site VPN requires a VPN gateway in Azure and a VPN device in the on-premises network.

B. Service Principal: Service Principal is a security identity used by applications, services, and tools to access Azure resources. You can use the Service Principal to authenticate and connect the virtual networks in Azure Stack Hub to virtual networks in Azure. This method is often used when automating the deployment of resources in Azure, and it provides a secure and scalable way to manage access to Azure resources.

The other options, C. Inbound NAT and D. Outbound NAT, are not valid methods to connect virtual networks in Azure Stack Hub to virtual networks in Azure. Inbound NAT is used to redirect traffic to a specific port or IP address within a network, while Outbound NAT is used to translate the source IP address of outgoing traffic. These methods are not relevant in the context of connecting virtual networks in Azure Stack Hub to virtual networks in Azure.

Therefore, the correct answer is (A) Site-to-site and (B) Service Principal. Option (E) All the above is incorrect as only options (A) and (B) are valid methods.