Examkin

Soru

Zorluk: KolayConfigure Azure Firewall

You need to route all outbound internet traffic from a subnet named Subnet1 through an Azure Firewall deployed in the same virtual network. You create a new route table and associate it with Subnet1. You add a route for the destination 0.0.0.0/00.0.0.0/0. Which next hop type must you select to ensure the traffic is routed through the Azure Firewall?

  1. A
    Virtual network gateway
  2. Virtual applianceCevap
  3. C
    Virtual network
  4. D
    Internet

Cevap

Virtual appliance
To route subnet traffic through an Azure Firewall, you must create a route table, associate it with the subnet, and add a route for destination 0.0.0.0/00.0.0.0/0 with the next hop type set to Virtual appliance. You must also specify the private IP address of the Azure Firewall as the next hop address.

Adım Adım Çözüm

1
Determine the device type of Azure Firewall.
Azure Firewall is a security virtual appliance running inside the virtual network.
Knowing that it acts as a virtual appliance dictates the routing configuration required in the User-Defined Route (UDR).
2
Select the correct next hop type for the route table rule.
Select Virtual appliance as the next hop type.
This tells the route table to send traffic matching the destination prefix (in this case, all internet traffic at 0.0.0.0/00.0.0.0/0) to a virtual appliance's IP address instead of using default system routing.
3
Provide the next hop address.
Enter the private IP address of the Azure Firewall.
This ensures that the traffic is delivered directly to the firewall's internal interface for inspection and filtering.

Anahtar Kavram

Azure Firewall routing with User-Defined Routes (UDR)
Bu soruyu puanla

Konular

Configure Azure Firewall

Bu konudan daha fazla soru