You are configuring outbound internet connectivity for a subnet named Subnet1 in a virtual network named VNet1. You deploy Azure Firewall to VNet1.
To route all outbound internet traffic from Subnet1 through the Azure Firewall using a User-Defined Route (UDR), which two options must you configure in the route table associated with Subnet1? Select two.
- A route with the destination IP address range set to 0.0.0.0/0 and the next hop type set to Virtual applianceCevap
- The private IP address of the Azure Firewall as the next hop IP addressCevap
- CA route with the destination IP address range set to 0.0.0.0/0 and the next hop type set to Virtual network gateway
- DAn outbound Network Security Group (NSG) rule on Subnet1 to allow internet traffic, configured with a priority of 65500
Cevap
To route outbound internet traffic through Azure Firewall, you must configure a route with a destination of 0.0.0.0/0 and the next hop type set to Virtual appliance, and specify the private IP address of the Azure Firewall as the next hop IP address.
To route all outbound traffic to Azure Firewall, you need a route table associated with Subnet1. The route must target all internet traffic by using the destination IP address range 0.0.0.0/0. Additionally, because Azure Firewall is a firewall service, it acts as a virtual appliance, meaning the next hop type must be set to 'Virtual appliance' and the private IP address of the firewall must be supplied as the next hop address.
Adım Adım Çözüm
Anahtar Kavram
Configuring custom routing (User-Defined Routes) to forward traffic to Azure Firewall.