Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Network Engineer Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Azure Route Server (ARS) does not provide transit routing between VNets without a Network Virtual Appliance (NVA)
You're right — Azure Firewall can indeed be the best choice in this hub-and-spoke scenario, especially when you want secure transitive routing between spokes. Let me explain why your reference aligns with Microsoft’s recommendations:
Azure Firewall can be used to support transitive routing via User Defined Routes (UDRs), but it introduces latency and cost, and may not maximize throughput.