Exam AZ-900 topic 1 question 461 discussion

Third is NO. You can configure UDRs between two subnets in different virtual networks.

"Network security groups (NSGs) can contain multiple inbound and outbound security rules." ✅ Ja – NSGs können mehrere eingehende und ausgehende Sicherheitsregeln enthalten. "A VM that performs a particular function such as running a firewall is also called a Network virtual appliance." ✅ Ja – Eine virtuelle Maschine, die eine spezielle Funktion ausführt (z. B. eine Firewall), wird als Network Virtual Appliance (NVA) bezeichnet. "A user-defined route (UDR) can only control network traffic between subnets of a single virtual network." ❌ Nein – UDRs können den Datenverkehr nicht nur innerhalb eines einzelnen virtuellen Netzwerks steuern, sondern auch den Verkehr zu On-Premises-Netzwerken oder anderen VNETs über Peering.

✅ suggested answer is correct, it's Y,Y,N.

Is Y,Y,N The statement "A user-defined route (UDR) can only control network traffic between subnets of a single virtual network" is incorrect. In Azure, user-defined routes (UDRs) can indeed control network traffic within a single virtual network, but they can also influence traffic to destinations outside of the virtual network. This includes routing traffic to on-premises networks through VPN gateways, peered virtual networks, or even the internet via a Network Virtual Appliance (NVA).

Is Y,Y,N

3 - keyword is only - so its No A User Defined Route (UDR) in Azure can control network traffic not only within a single Virtual Network (VNet) but also between different subnets, VNets (through VNet peering), and even to on-premises networks if connected via VPN or ExpressRoute. UDRs provide a way to define how traffic is routed in the network, offering flexibility beyond the default system routes Azure provides.

Think should be Y, Y, Y