Practice Test 1 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has the following virtual networks defined in Azure.
| Name | Region | Description |
| whizlabHubVnet | East US | This virtual network is connected to the on-premise network by using a site-to-site VPN that has BGP route propagation enabled. This network contains subnets GatewaySubnet, SubnetA & AzureFirewallSubnet |
| whizlabSpokeVnet | East US | This virtual network is connected to whizlabHubVnet by using virtual network peering. This network contains a subnet named SubnetB |
The virtual machines created in SubnetB can communicate with computers on the on-premise network. Peering has been successfully established between VNet whizlabHubVnet and VNet whizlabSpokeVnet.
The company now wants to deploy Azure firewall to whizlabHubVnet. The following route tables have been created.
- whizlabrt1 – This includes a user-defined route that points to the private IP address of the Azure Firewall as the next hop address.
- whizlabrt2 – This disables BGP route propagation and defines the private IP address of the Azure Firewall as the default gateway.
You have to ensure that traffic from SubnetB and the on-premise network flows through the Azure firewall.
With which of the following would you associate the route table “whizlabrt2”?
A. whizlabHubVnet
B. AzureFirewallSubnet
C. GatewaySubnet
D. SubnetB
Answer – D
We need to attach whizlabrt2 on subnet SubnetB deployed in whizlabSpokeVnet
Following is the diagram
For more information on the hub and spoke network topology, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/firewall/tutorial-hybrid-portal
Comments are closed, but trackbacks and pingbacks are open.