An Azure subscription contains a virtual network named `VNet1` (10.10.0.0/16). `VNet1` con… — Microsoft Azure Administrator (AZ-104)

An Azure subscription contains a virtual network named `VNet1` ( $10.10.0.0/16$ ). `VNet1` contains three subnets: `Subnet-Web` ( $10.10.1.0/24$ ), `Subnet-App` ( $10.10.2.0/24$ ), and `Subnet-DMZ` ( $10.10.0.0/24$ ). A Network Virtual Appliance (NVA) named `NVA1` is deployed in `Subnet-DMZ` and has the IP address $10.10.0.4$ . You need to ensure that all traffic from `Subnet-Web` destined for `Subnet-App` is routed through `NVA1`. Which two actions should you perform? (Select two.)

Create a route table, add a route for destination $10.10.2.0/24$ with the next hop type set to Virtual Appliance and next hop IP address set to $10.10.0.4$ , and associate the route table with Subnet-Web.Cevap
Enable IP forwarding on the Azure network interface associated with NVA1.Cevap
C
Create a route table, add a route for destination $10.10.1.0/24$ with the next hop type set to Virtual Network Gateway, and associate the route table with Subnet-App.
D
Enable IP forwarding on the network interfaces of all virtual machines in Subnet-Web.

Cevap

To route traffic from the web subnet to the application subnet through the NVA, you must create a route table with a route targeting the application subnet (

10.10.2.0/24

) using the virtual appliance (

10.10.0.4

) as the next hop, associate this route table with the web subnet, and enable IP forwarding on the network interface of the NVA.

The correct options state that you must associate a route table with a custom route targeting the application subnet using the virtual appliance as the next hop to the web subnet, and enable IP forwarding on the network interface of the NVA. The route table overrides system routing to ensure traffic is sent to the NVA's IP, and IP forwarding allows the NVA to accept and forward packets not addressed to its own IP.

Adım Adım Çözüm

Configure the User-Defined Route (UDR) in a route table.

A route table is created with a route pointing to destination

10.10.2.0/24

, using next hop type 'Virtual Appliance' and next hop IP address

10.10.0.4

This route overrides the default system route that directs traffic directly between subnets in the same virtual network.

Associate the route table with the source subnet.

The route table is associated with Subnet-Web.

Associating the route table applies the custom routing rules to all resources deployed within the web subnet.

Configure IP forwarding on the Network Virtual Appliance (NVA).

IP forwarding is enabled on the Azure network interface of NVA1.

Azure network interfaces drop traffic not destined for their assigned IP addresses by default. Enabling IP forwarding allows the NVA to receive and forward transit traffic.

Anahtar Kavram

User-Defined Routes (UDR) and IP forwarding for Network Virtual Appliances (NVA)

Soru

Cevap

Adım Adım Çözüm

Anahtar Kavram

Sık Yapılan Hatalar

Konular