Examkin

Soru

Zorluk: KolayConfigure Azure Firewall

You plan to deploy an Azure Firewall instance. You need to create a dedicated subnet for the firewall within an existing VNet. Which two configuration requirements must be met for this subnet? (Select two.)

  1. The subnet must be named AzureFirewallSubnet.Cevap
  2. The subnet address prefix must be /26/26 or larger.Cevap
  3. C
    The subnet must be named AzureFirewallSubnet_FW.
  4. D
    The subnet address prefix must be /29/29 or larger.
  5. E
    The subnet must have a Network Security Group (NSG) associated with it to control inbound traffic.

Cevap

The dedicated subnet hosting Azure Firewall must be named exactly 'AzureFirewallSubnet' and must have an address prefix of /26/26 or larger.
For a successful Azure Firewall deployment, the firewall subnet must be named exactly 'AzureFirewallSubnet' and have an IP address range of /26/26 or larger to accommodate firewall scaling and management.

Adım Adım Çözüm

1
Identify the naming requirement for the Azure Firewall subnet.
The subnet name must be exactly 'AzureFirewallSubnet'.
Azure Firewall looks for this specific subnet name during deployment.
2
Determine the minimum subnet size (CIDR block) required for the firewall.
The subnet prefix size must be /26/26 or larger.
This provides sufficient IP addresses for scaling and maintenance operations.
3
Verify if external security groups like NSGs are allowed on this subnet.
No NSG should be associated with the 'AzureFirewallSubnet'.
NSGs can disrupt stateful packet inspection and lead to routing issues.

Anahtar Kavram

Azure Firewall Subnet Requirements
Bu soruyu puanla

Konular

Configure Azure Firewall

Bu konudan daha fazla soru