Exam AZ-700 topic 5 question 30 discussion

Actual exam question from Microsoft's AZ-700

Question #: 30
Topic #: 5

You have an Azure subscription that contains the following resources:

• A virtual network named Vnet1
• Two subnets named subnet1 and AzureFirewallSubnet
• A public Azure Firewall named FW1
• A route table named RT1 that is associated to Subnet1
• A rule routing of 0.0.0.0/0 to FW1 in RT1

After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.

You need to ensure that the virtual machines can be activated.

What should you do?

A. Add an internet route to RT1 for the Azure Key Management Service (KMS).
B. On FW1, create an outbound service tag rule for Azure Cloud.
C. Deploy a NAT gateway.
D. On FW1, configure a DNAT rule for TCP port 1688.

Show Suggested Answer

Suggested Answer: D 🗳️

by nap61 at Dec. 10, 2024, 1:30 p.m.

Comments

Submit Cancel

nap61

1 day, 23 hours ago

Selected Answer: B

In this scenario, the virtual machines running Windows Server need to communicate with the Azure Key Management Service (KMS) for activation. The KMS is accessed over the internet, so ensuring that your virtual machines can reach KMS is crucial. To allow this, the most appropriate action is to create an outbound service tag rule for Azure Cloud on FW1. This will enable your virtual machines to connect to the necessary Azure services, including KMS, for activation. So, the correct answer is B. On FW1, create an outbound service tag rule for Azure Cloud.

upvoted 1 times

...

Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 5 question 30 discussion

Comments

nap61

SY0-701