Which of the following statements is incorrect?

A$.)$ Different from a traditional VPN$,$ Azure relay provides a secure channel only for a single application on the designated server running the application

B$.)$ Azure AD application proxy provides remote and secure connectivity to an on$-$premises web application, with no VPN or firewall configuration requirements at the on$-$premises network

C$.)$ When using Azure virtual WAN with a vHub, you need to create separate connections from on$-$premises networks $($such as ExpressRoute or site$-$to$-$site and point$-$to$-$site VPNs$)$ to Azure vNets

D$.)$ An Azure extended network requires a virtual network gateway that is configured using a site$-$to$-$site VPN or ExpressRoute