Exam AZ-700 topic 4 question 22 discussion

Actual exam question from APICS's CSCP

Question #: 22
Topic #: 1

You have an Azure subscription that contains the following resources:

• A virtual network named Vnet1
• Two subnets named subnet1 and AzureFirewallSubnet
• A public Azure Firewall named FW1
• A route table named RT1 that is associated to Subnet1
• A rule routing of 0.0.0.0/0 to FW1 in RT1

After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.

You need to ensure that the virtual machines can be activated.

What should you do?

A. On FW1, create an outbound network rule that allows traffic to the Azure Key Management Service (KMS).
B. On FW1, create an outbound service tag rule for Azure Cloud.
C. Deploy a NAT gateway.
D. Deploy an application security group that allows outbound traffic to 1688.

Show Suggested Answer

Suggested Answer: A 🗳️

by voldemort123 at Oct. 9, 2023, 8:42 a.m.

Comments

Submit Cancel

zio111

Highly Voted 1 year ago

I'm sure I will fail this on exam next week

upvoted 6 times

...

Egger

Most Recent 6 months, 3 weeks ago

A. On FW1, create an outbound network rule that allows traffic to the Azure Key Management Service (KMS): Correct Answer: Azure VMs need to communicate with the KMS to activate Windows Server instances. By creating an outbound rule on the firewall that allows traffic to the KMS, you ensure the VMs can reach the activation service. B. On FW1, create an outbound service tag rule for Azure Cloud: Incorrect: While Azure Cloud service tags include a wide range of IP addresses for Azure services, creating a rule for the KMS is more specific and appropriate for this scenario. This option is too broad. C. Deploy a NAT gateway: Incorrect: A NAT gateway provides outbound internet connectivity for your subnets, but it won't specifically address the issue of connecting to the KMS for activation. D. Deploy an application security group that allows outbound traffic to 1688: Incorrect: An application security group (ASG) helps manage security rules for your VMs, but it won't directly solve the problem of allowing traffic through the firewall to the KMS.

upvoted 1 times

...