ExpressRoute and Site-to-Site VPN

Q: If I'm using ExpressRoute for my Azure virtual network connectivity, can I also use site-to-site VPN?

A: Currently, only one gateway is supported per virtual network, which means you can have either ExpressRoute or site-to-site/point-to-site configured for virtual network connectivity. Even if you're using ExpressRoute, you can still use an endpoint defined through the cloud service to RDP to a virtual machine via the Internet if necessary.