You configure routing for an Azure subnet named `Subnet1`. You deploy a third-party firewall virtual machine to act as a Network Virtual Appliance (NVA) in a subnet named `Subnet-DMZ` within the same virtual network. You need to route all outbound internet traffic from `Subnet1` through the NVA. You create a custom route table and associate it with `Subnet1`. Which route configuration must you add to the route table?
- ADestination prefix of and next hop type of Internet
- Destination prefix of and next hop type of Virtual applianceAnswer
- CDestination prefix of and next hop type of Virtual network gateway
- DDestination prefix of * and next hop type of Virtual appliance
Answer
A route with a destination prefix of and next hop type of Virtual appliance.
To route all outbound internet traffic through a Network Virtual Appliance (NVA), you must define a default route with the destination prefix and set the next hop type to Virtual appliance, specifying the NVA's private IP address as the next hop IP address.
Step-by-Step Solution
Key Concept
The configuration of user-defined routes to direct outbound internet traffic () to a Network Virtual Appliance (NVA) using the 'Virtual appliance' next hop type.