Examkin

Question

Difficulty: EasyConfigure User-Defined Routes and Routing Tables

You have an Azure virtual network named VNet1 that contains two subnets named SubnetA (10.0.1.0/24) and SubnetB (10.0.2.0/24). A Network Virtual Appliance (NVA) with the IP address 10.0.2.4 is deployed in SubnetB. By default, system routes allow direct communication between the two subnets. You want to route all outbound internet traffic from SubnetA through the NVA in SubnetB. You create a route table and associate it with SubnetA. You add a route for the destination 0.0.0.0/0. Which next hop type should you configure in the route?

  1. A
    Virtual network gateway
  2. B
    Internet
  3. Virtual applianceAnswer
  4. D
    Virtual network

Answer

Virtual appliance
Selecting 'Virtual appliance' as the next hop type allows you to specify a private IP address (such as 10.0.2.4) belonging to a virtual machine or internal load balancer that acts as a firewall or router, directing the SubnetA traffic through the NVA.

Step-by-Step Solution

1
Analyze the traffic requirement.
Outbound internet traffic from SubnetA must go through the NVA at 10.0.2.4.
This requires routing traffic destined for 0.0.0.0/0 to a custom VM/firewall in a different subnet.
2
Identify the correct next hop type in the User-Defined Route.
The next hop type must be set to 'Virtual appliance'.
Azure requires the 'Virtual appliance' next hop type to forward traffic to private IP addresses of virtual machines or internal load balancers acting as NVAs.

Key Concept

To redirect traffic to a Network Virtual Appliance (NVA), you must configure a User-Defined Route (UDR) with the next hop type set to 'Virtual appliance' and provide the NVA's private IP address.
Rate this question

Topics

Configure User-Defined Routes and Routing Tables