Your company has an Azure virtual network named `VNet-Production` that contains two subnets named `Subnet-Database` () and `Subnet-Security` (). By default, virtual machines in `Subnet-Database` route traffic directly to the internet using the default system routes. A third-party firewall virtual machine with the private IP address of is deployed in `Subnet-Security`. You need to redirect all outbound internet traffic () from `Subnet-Database` to the firewall. Which next hop type must you specify in the route table to ensure the traffic is sent to the firewall's private IP address?
- AVirtual network gateway
- BInternet
- Virtual applianceAnswer
- DVnetLocal
Answer
Virtual appliance
The correct answer is 'Virtual appliance'. When you want to route traffic through a custom virtual machine acting as a firewall or network virtual appliance (NVA), you must create a User-Defined Route (UDR) and select 'Virtual appliance' as the next hop type, providing the private IP address of the firewall VM ().
Step-by-Step Solution
Key Concept
Selecting the correct next hop type for custom routing to a Network Virtual Appliance (NVA)
Estimated Time:45s