Examkin

Question

Difficulty: EasyConfigure Azure Firewall

You need to route all outbound internet traffic from a subnet named Subnet1 through an Azure Firewall deployed in the same virtual network. You create a new route table and associate it with Subnet1. You add a route for the destination 0.0.0.0/00.0.0.0/0. Which next hop type must you select to ensure the traffic is routed through the Azure Firewall?

  1. A
    Virtual network gateway
  2. Virtual applianceAnswer
  3. C
    Virtual network
  4. D
    Internet

Answer

Virtual appliance
To route subnet traffic through an Azure Firewall, you must create a route table, associate it with the subnet, and add a route for destination 0.0.0.0/00.0.0.0/0 with the next hop type set to Virtual appliance. You must also specify the private IP address of the Azure Firewall as the next hop address.

Step-by-Step Solution

1
Determine the device type of Azure Firewall.
Azure Firewall is a security virtual appliance running inside the virtual network.
Knowing that it acts as a virtual appliance dictates the routing configuration required in the User-Defined Route (UDR).
2
Select the correct next hop type for the route table rule.
Select Virtual appliance as the next hop type.
This tells the route table to send traffic matching the destination prefix (in this case, all internet traffic at 0.0.0.0/00.0.0.0/0) to a virtual appliance's IP address instead of using default system routing.
3
Provide the next hop address.
Enter the private IP address of the Azure Firewall.
This ensures that the traffic is delivered directly to the firewall's internal interface for inspection and filtering.

Key Concept

Azure Firewall routing with User-Defined Routes (UDR)
Rate this question

Topics

Configure Azure Firewall

More questions from this topic