AZ-305 · Question 51 · Domain 4.4: Network Solutions
CASE STUDY: Contoso Ltd is a global financial services company migrating to Azure.
Current environment: 3 on-premises datacenters (New York, London, Tokyo) connected via MPLS.
Azure footprint: 1 Hub VNet in East US, 1 Hub in UK South. 50 Spoke VNets peered to the Hubs.
Requirements:
QUESTION: To meet Requirement 2 (Inspect all internet-bound traffic from spokes), you deploy Azure Firewall in the Hub VNets. How must you configure the Spoke VNets to ensure traffic is routed to the firewall?
Answer options:
Enable BGP on the Spoke VNets to learn the default route from the Hub.
Create a User Defined Route (UDR) with a prefix of 0.0.0.0/0 pointing to the Azure Firewall private IP, and assign it to the Spoke subnets.
Configure Azure Virtual WAN to automatically inject the route.
Configure a Network Security Group (NSG) on the Spoke subnets to forward traffic to the Firewall.
55 questions · hints · full answers · grading
Expert