Question

You have an Azure virtual network named `VNet1` that contains three subnets named `Subnet-Public` ($10.0.1.0/24$), `Subnet-Secure` ($10.0.2.0/24$), and `Subnet-DMZ` ($10.0.3.0/24$). A Network Virtual Appliance (NVA) is deployed in `Subnet-DMZ` and is assigned the private IP address $10.0.3.4$. You need to create a user-defined route in a route table associated with `Subnet-Secure` to direct all outbound internet traffic from `Subnet-Secure` through the NVA. Which next hop type and next hop IP address should you configure in the route table to meet this requirement?