What does a Site-to-Site VPN do?

A Site-to-Site VPN connects your on-premises network (like your corporate office) to an Azure virtual network. This connection is established between an on-premises VPN device (e.g., a router or firewall with VPN capabilities) and an Azure VPN gateway. It creates a secure, encrypted tunnel over the public internet, allowing resources in your on-premises network to communicate with resources in your Azure virtual network as if they were on the same private network. The first incorrect option describes a Point-to-Site VPN, which connects individual client computers to an Azure virtual network. The second incorrect option describes Azure ExpressRoute, which provides a private, dedicated connection that bypasses the public internet entirely.