Examkin

Question

Difficulty: MediumConfigure Azure Firewall

An administrator is configuring inbound access from the internet to a web server named Server1 (private IP address 10.1.1.4) using Azure Firewall. The firewall is deployed in the same virtual network and has a public IP address of 40.121.20.15 and a private IP address of 10.1.0.4. The administrator wants internet clients to access Server1 by sending requests to http://40.121.20.15:8080. Which IP address must the administrator specify as the Destination Address in the DNAT rule to ensure traffic is correctly forwarded to Server1 on port 80?

  1. A
    10.1.1.4
  2. B
    10.1.0.4
  3. 40.121.20.15Answer
  4. D
    0.0.0.0/0

Answer

40.121.20.15
To configure inbound DNAT (Destination Network Address Translation) on an Azure Firewall, the Destination Address field in the rule must contain the firewall's public IP address (40.121.20.15). When internet traffic arrives at this IP on port 8080, the DNAT rule translates the destination to the internal web server's private IP (10.1.1.4) on port 80, allowing the connection to succeed.

Step-by-Step Solution

1
Determine the external entry point for internet client traffic targeting the internal web server.
Internet clients must target the public IP address of the Azure Firewall (40.121.20.15).
Internal resources have private IP addresses that are not routable from the public internet, requiring the firewall's public IP as the entry point.
2
Identify the proper parameters for an Azure Firewall DNAT rule.
The Destination Address must be the firewall's public IP, and the Translated Address must be the web server's private IP.
DNAT works by matching packets arriving at the firewall's public IP (Destination Address) and translating them to the internal server's private IP (Translated Address).
3
Select the correct IP address that matches the Destination Address parameter.
The correct IP address is 40.121.20.15.
Specifying the firewall's public IP ensures the firewall listens on this address for incoming client requests on port 8080.

Key Concept

Azure Firewall Destination NAT (DNAT) rule configuration
Estimated Time:1m 30s
Rate this question

Topics

Configure Azure Firewall

More questions from this topic