You have five datacenters across North America and Europe. You have an Azure subscription. You need to recommend a solution to provide connectivity…

Azure Virtual WAN is a managed networking service that provides a unified framework for connectivity, routing, and security. It is designed for large-scale, site-to-site connectivity scenarios like the one described. It creates a hub-and-spoke architecture where the Azure Virtual WAN hub acts as the central point. This architecture inherently supports any-to-any connectivity (datacenter-to-Azure and datacenter-to-datacenter). The integrated virtual hub router provides centralized route management. Furthermore, by deploying a Secured Virtual Hub, you can integrate Azure Firewall, enabling the central management of firewall rules for all traffic. As a managed service, it significantly minimizes the administrative effort required to configure and maintain complex network topologies.

B. ExpressRoute: ExpressRoute is a connectivity service for private connections to Azure. While it can be part of the solution, it does not inherently provide central management of routes and firewall rules for a multi-site topology without significant additional configuration.
C. Azure Front Door: This is a Layer 7 (HTTP/S) load balancing and web application firewall (WAF) service. It is used for managing web traffic and is not suitable for providing network-level connectivity between datacenters.
D. Azure VPN Gateway: While VPN Gateways can connect datacenters to Azure, creating an any-to-any connectivity mesh for five sites with centralized management would be complex and administratively intensive, violating the "minimize administrative effort" requirement. ---

1. Microsoft Learn: What is Azure Virtual WAN?

Quote: "Azure Virtual WAN is a networking service that brings many networking

security

and routing functionalities together to provide a single operational interface... Key benefits include... Built-in routing

security

and connectivity in a centralized hub."

Section: Introduction. This source confirms that Virtual WAN is the service designed for centralized connectivity

routing

and security.

2. Microsoft Learn: Virtual WAN routing architecture

Quote: "Azure Virtual WAN is a networking service that provides optimized and automated branch-to-branch connectivity through Azure... The virtual hub router is the core of the hub

and it's responsible for all routing between all endpoints."

Section: Virtual hub routing. This reference supports the central management of network routes requirement.

3. Microsoft Learn: What is a secured virtual hub?

Quote: "A secured virtual hub is an Azure Virtual WAN hub with associated security and routing policies configured by Azure Firewall Manager. Use a secured virtual hub to easily create hub-and-spoke and transitive architectures with centralized security and policy management..."

Section: Introduction. This source validates the capability for central management of firewall rules.

4. Microsoft Learn: What is Azure Front Door?

Quote: "Azure Front Door is a modern cloud Content Delivery Network (CDN) service that delivers high performance

scalability

and secure user experiences for your content and applications... It operates at Layer 7 (HTTP/S layer)."

Section: Introduction. This reference confirms that Azure Front Door is a Layer 7 service and inappropriate for this network connectivity scenario.