An enterprise requires a private, dedicated network link between its on-premises data center and Azure. What should they configure?

Azure ExpressRoute provides a private, dedicated, high-bandwidth connection between an on-premises network and Azure data centers. This ensures consistent network performance and enhanced security, making it ideal for hybrid cloud scenarios requiring reliable connectivity. Azure VPN Gateway establishes secure connections over the public internet, which is not dedicated and can have variable performance. Azure Bastion provides secure RDP/SSH access to virtual machines directly through the Azure portal, not a dedicated network link. Azure Virtual WAN is a networking service that brings many networking, security, and routing functionalities together to provide a single operational interface, but it doesn't inherently provide the dedicated private link itself; ExpressRoute or VPN Gateway would be components within a Virtual WAN solution for connectivity.