Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Network Engineer Associate · Microsoft
Interactive Drag & Drop Matching
Drag each configuration to its target, or tap an option then tap a target slot.
Hotspot Solution:
YNY 1: SN1 required RT to change 0.0.0.0/0 to Virtual Appliance of FW otherwise it will go out the Wire Service. SN2 required RT to change 0.0.0.0/0 to point to Firewall somehow otherwise it will also go out its wire service. Not sure if this would be a Virtual Appliance or Internal IP route without trying it. 2: N: Route table in 1 will get it to the Firewall interface, otherwise it doesn't know it exists and will go out the wire service of its own subnet. 3: Seems so, Standard can do web site category filtering. = Y 700 is all we need right?
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
YNY 1- Yes because the route priority for the same adress prefix is 1. UDR 2. BGP 3. System-route here the 3rd option will take place because we have a vnet peering between Vnet1 and Vnet2 so to "force" traffic between them to reach each other via FW, you need to assign UDR to both subnets. 2- No because FW is an NVA not a VNG 3- yes Azure Firewall standard can handle web content filtering
YNY 1: SN1 required RT to change 0.0.0.0/0 to Virtual Appliance of FW otherwise it will go out the Wire Service. SN2 required RT to change 0.0.0.0/0 to point to Firewall somehow otherwise it will also go out its wire service. Not sure if this would be a Virtual Appliance or Internal IP route without trying it. 2: N: Route table in 1 will get it to the Firewall interface, otherwise it doesn't know it exists and will go out the wire service of its own subnet. 3: Seems so, Standard can do web site category filtering. = Y 700 is all we need right?
NNY 1. No, not a routing table, but a UDR would be needed (at least for VM2) 2. No, that wont help for that. Again a UDR 3. Yes. https://learn.microsoft.com/en-us/azure/firewall/choose-firewall-sku