Examkin

Soru

Zorluk: OrtaConfigure Azure Firewall

An organization is implementing a centralized security architecture in Azure. They deploy an Azure Firewall in a virtual network named `VNet-Central`. The private IP address of the firewall is `10.100.0.4`. To route all outbound internet traffic from a workload subnet in the same virtual network through the firewall, a new route table must be configured and associated with the workload subnet. Which route configuration should be added to the route table?

  1. Address prefix: `0.0.0.0/0`, Next hop type: `Virtual appliance`, Next hop IP address: `10.100.0.4`Cevap
  2. B
    Address prefix: `0.0.0.0/0`, Next hop type: `Virtual Network Gateway`, Next hop IP address: `10.100.0.4`
  3. C
    Address prefix: `0.0.0.0/0`, Next hop type: `Virtual appliance`, Next hop IP address: The public IP address of the Azure Firewall
  4. D
    Address prefix: `0.0.0.0/0`, Next hop type: `Internet`, Next hop IP address: None

Cevap

To route outbound internet traffic through the Azure Firewall, configure a route with the address prefix `0.0.0.0/0`, the next hop type set to `Virtual appliance`, and the next hop IP address set to the private IP address of the firewall (`10.100.0.4`).
To route outbound internet traffic through an Azure Firewall, you must define a custom route with the address prefix `0.0.0.0/0`. The next hop type must be `Virtual appliance` to target the firewall, and the next hop IP address must be the private IP address of the firewall (`10.100.0.4`) so that the traffic is correctly forwarded to the firewall's internal interface.

Adım Adım Çözüm

1
Identify the destination for all internet traffic.
The destination address prefix is `0.0.0.0/0` representing all IPv4 addresses external to the virtual network.
Outbound default routing in Azure is defined by the destination prefix `0.0.0.0/0`.
2
Select the correct next hop type for a firewall appliance.
The next hop type must be set to `Virtual appliance`.
Azure Firewall acts as a network virtual appliance (NVA) to inspect and filter traffic.
3
Determine the next hop IP address for routing within the virtual network.
The next hop IP address is the private IP address of the Azure Firewall (`10.100.0.4`).
Internal traffic within the virtual network must be sent to the internal/private IP of the firewall rather than its public IP.

Anahtar Kavram

Routing traffic through Azure Firewall using User-Defined Routes (UDRs)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Configure Azure Firewall

Bu konudan daha fazla soru