Examkin

Question

Difficulty: EasyConfigure User-Defined Routes and Routing Tables

An organization has deployed a virtual network containing two subnets: WebSubnet (10.10.1.0/2410.10.1.0/24) and ApplianceSubnet (10.10.2.0/2410.10.2.0/24). A firewall virtual machine operating as a router is deployed in ApplianceSubnet with the IP address 10.10.2.10010.10.2.100. All outbound internet traffic from WebSubnet must pass through this router. Which two settings must be configured to achieve this routing flow? (Select TWO)

  1. Associate the route table with WebSubnet.Answer
  2. Add a route to the route table with the destination prefix 0.0.0.0/00.0.0.0/0, next hop type Virtual appliance, and next hop IP address 10.10.2.10010.10.2.100.Answer
  3. C
    Add a route to the route table with the destination prefix 0.0.0.0/00.0.0.0/0, next hop type Virtual network gateway, and next hop IP address 10.10.2.10010.10.2.100.
  4. D
    Associate the route table with ApplianceSubnet.

Answer

To redirect all outbound internet traffic from the WebSubnet through the firewall router, you must associate the custom route table with WebSubnet and add a route for destination 0.0.0.0/00.0.0.0/0 with the next hop type set to Virtual appliance and the next hop IP address set to 10.10.2.10010.10.2.100.
To override default system routing for internet-bound traffic from the WebSubnet, a User-Defined Route (UDR) must be applied. The custom route table must be associated with the subnet originating the traffic (WebSubnet). To direct this traffic to the firewall VM acting as a router, the route must target all destinations (0.0.0.0/00.0.0.0/0) using the 'Virtual appliance' next hop type with the firewall's private IP address (10.10.2.10010.10.2.100).

Step-by-Step Solution

1
Identify the source subnet and the next-hop target.
The source is WebSubnet (10.10.1.0/2410.10.1.0/24), and the target next-hop is the firewall router at 10.10.2.10010.10.2.100 in ApplianceSubnet.
Routing rules must be applied to the subnet where the traffic originates, and the route must point to the specific IP address of the firewall.
2
Define the route entry for internet traffic.
Create a route with destination prefix 0.0.0.0/00.0.0.0/0, next hop type 'Virtual appliance', and next hop IP address 10.10.2.10010.10.2.100.
The prefix 0.0.0.0/00.0.0.0/0 represents all internet traffic. Azure requires the 'Virtual appliance' next hop type when routing to a VM acting as a router.
3
Associate the route table with the source subnet.
Link the custom route table containing the new route to WebSubnet.
A route table has no effect until it is associated with one or more subnets.

Key Concept

Configuring custom routes (UDRs) to direct traffic through a Network Virtual Appliance (NVA).
Rate this question

Topics

Configure User-Defined Routes and Routing Tables