Exam AZ-700 topic 3 question 15 discussion

According to this article correct answer would be NAT Gateway (IP3) https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource#nat-and-vm-with-instance-level-public-ip

https://docs.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource#nat-and-vm-with-instance-level-public-ip-and-public-load-balancer

A NAT gateway automatically connects outbound to the internet after being attached to a public IP address or prefix and a subnet. A NAT gateway takes priority over Azure Load Balancer with outbound rules, instance-level public IP addresses on virtual machines (VMs), and Azure Firewall for outbound connectivity. https://learn.microsoft.com/en-us/azure/nat-gateway/faq#how-can-i-use-a-nat-gateway-to-connect-outbound-in-a-setup-where-i-m-currently-using-a-different-service-for-outbound

https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design "In the presence of other outbound configurations within a virtual network, such as a load balancer or instance-level public IPs (IL PIPs), the NAT gateway takes precedence for outbound connectivity" IP3 is correct

According to Microsoft Learn, when a NAT gateway is attached to a subnet within a virtual network, the NAT gateway assumes the subnet’s default next hop type for all outbound traffic directed to the internet. No extra routing configurations are required. NAT Gateway doesn’t provide unsolicited inbound connections from the internet 12. NAT gateway takes precedence over other outbound connectivity methods, including Load balancer, instance-level public IP addresses, and Azure Firewall. When NAT gateway is configured to a virtual network where a different outbound connectivity method already exists, NAT gateway takes over all outbound traffic moving forward 1. I hope this helps!

C is the correct answer. https://learn.microsoft.com/en-us/azure/nat-gateway/nat-gateway-design#connect-to-the-internet-with-a-nat-gateway

I C As per MS guidelines for outbound connections NAT gateway takes precedence over other outbound connectivity methods, including Load balancer, instance-level public IP addresses, and Azure Firewall.

"In the presence of other outbound configurations within a virtual network, such as Load balancer or instance-level public IPs (IL PIPs), NAT gateway takes precedence for outbound connectivity. All new outbound initiated and return traffic starts using NAT gateway. There's no down time on outbound connectivity after adding NAT gateway to a subnet with existing outbound configurations." so correct answer is NAT Gateway (IP3)

NAT takes precedence

I think this question or scenario is not right. You can‘t add a NAT gateway to a subnet that have a load balancer with basic sku. Tried this in a lab and i needed to change the loadbalancer to standard sku with standard ip and not basic.

See the "NAT and VM with an instance-level public IP" section at: https://learn.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource#nat-and-vm-with-instance-level-public-ip

In exam Feb, 2023

correct answer

IP3.. NAT gateway is priority

IP3 is correct. NAT Gateway is most prioritiesed.

https://learn.microsoft.com/en-us/azure/virtual-network/nat-gateway/nat-gateway-resource Any outbound configuration from a load-balancing rule or outbound rules is superseded by NAT gateway. The VM will also use NAT gateway for outbound. Inbound originated isn't affected. The question is for outbound, inbound will use ILPIP

When initiating outbound traffic from VM1, the instance-level public IP address (ILPIP) of VM1 would be used. This is because the ILPIP is the public IP address associated specifically with VM1, and would be used for outbound traffic originating from that virtual machine. The public IP address associated with the Basic Load Balancer and the NAT Gateway, as well as the public IP address associated with the virtual network gateway, would not be used for outbound traffic originating from VM1.