exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 5 question 114 discussion

Actual exam question from Microsoft's AZ-104
Question #: 114
Topic #: 5
[All AZ-104 Questions]

You have an Azure subscription that contains the resources shown in the following table.



You need to manage outbound traffic from VNET1 by using Firewall1.

What should you do first?

  • A. Configure the Hybrid Connection Manager.
  • B. Upgrade ASP1 to the Premium SKU.
  • C. Create a route table.
  • D. Create an Azure Network Watcher.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
fatihaxi
Highly Voted 2 years, 1 month ago
Route all traffic to the firewall When you create a virtual network, Azure automatically creates a default route table for each of its subnets and adds system default routes to the table. In this step, you create a user-defined route table that routes all traffic to the firewall, and then associate it with the App Service subnet in the integrated virtual network. Section3 in document. https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall
upvoted 34 times
FabrityDev
2 years, 1 month ago
Agree with that
upvoted 2 times
...
DeBoer
2 years ago
I have to (reluctantly) agree; normally I'd say RTs are for IaaS resources only and ASPs are a PaaS resource. However - all other answers make even less sense. IF we assume that the ASP has VNet integration and the switch to send all traffic across the VNet has been toggled then yes, a RT would work to force the traffic to the AF.
upvoted 2 times
...
...
zellck
Highly Voted 2 years ago
Selected Answer: C
C is the answer. https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall#3-route-all-traffic-to-the-firewall When you create a virtual network, Azure automatically creates a default route table for each of its subnets and adds system default routes to the table. In this step, you create a user-defined route table that routes all traffic to the firewall, and then associate it with the App Service subnet in the integrated virtual network.
upvoted 6 times
...
[Removed]
Most Recent 5 months ago
Selected Answer: C
C is correct
upvoted 1 times
...
Amir1909
11 months, 2 weeks ago
C is correct
upvoted 1 times
...
er101q
2 years, 1 month ago
A. Configure the Hybrid Connection Manager. Before you can manage outbound traffic from VNET1 using Firewall1, you need to have the Hybrid Connection Manager configured. The Hybrid Connection Manager is required for Firewall1 to function as an outbound-only firewall. Once the Hybrid Connection Manager is configured, you can manage outbound traffic from VNET1 using Firewall1.
upvoted 1 times
GBAU
2 years ago
No mention of Firewall to function as an outbound-only firewall. No mention of needing to ensure App1 goes through the firewall (App1 is a red herring) The ONLY thing you need to do is "manage outbound traffic from VNET1 by using Firewall1" Hence C: Create a route table.
upvoted 2 times
...
...
KingChuang
2 years, 1 month ago
Selected Answer: C
C. Create a route table. Step 3. Route all traffic to the firewall https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall
upvoted 1 times
...
FabrityDev
2 years, 1 month ago
Selected Answer: C
As described by fatihaxi and the source https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration it is the route table creation
upvoted 1 times
...
Ashfaque_9x
2 years, 1 month ago
Selected Answer: C
C. Create a route table.
upvoted 1 times
...
sss123412
2 years, 1 month ago
Correct answer B. Outbound traffic management using Azure Firewall is only available for App Service apps or function apps that are hosted on an App Service plan in the Premium SKU
upvoted 1 times
FabrityDev
2 years, 1 month ago
Where did you get that information from? I looked into https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration as well as source provided by fatihaxi and didn't find such information. On the other hand, creating a route table is explicitly described.
upvoted 1 times
...
GBAU
2 years ago
The question is not asking how to get APP1 to connect through the firewall, its asking how to get VNET1 to connect through the Firewall (so you can manage its traffic). APP1 is a red herring in this question.
upvoted 2 times
...
...
[Removed]
2 years, 1 month ago
Definitly on the test and I answered it wrong lmao
upvoted 2 times
FabrityDev
2 years, 1 month ago
No one asked. If you want to comment then give some details. Which answer did you pick? Which answer is correct in your opinion?
upvoted 1 times
Onobhas01
2 years, 1 month ago
Dude mind your business. Though you don't care, some people actually care if a question has been in the exams recently.
upvoted 3 times
RougePotatoe
2 years ago
Spend more time learning less time worrying about which questions are going to be on the test ROFL.
upvoted 1 times
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago