Exam AZ-700 topic 4 question 23 discussion

Actual exam question from Microsoft's AZ-700

Question #: 23
Topic #: 4

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1.

You have an Azure Firewall Policy named FP1 that is associated to FW1.

You need to ensure that RDP requests to the public IP address of FW1 route to VM1.

What should you configure on FP1?

A. a network rule
B. URL filtering
C. a DNAT rule
D. an application rule

Show Suggested Answer

Suggested Answer: C 🗳️

by omgMerrick at Feb. 20, 2023, 3:04 a.m.

Comments

Submit Cancel

omgMerrick

Highly Voted 1 year, 3 months ago

Selected Answer: C

C. a DNAT rule To allow RDP requests to reach VM1 through the public IP of FW1, you need to create a rule that translates the destination IP address of the incoming RDP requests to the private IP address of VM1. This is done through a type of rule called a DNAT rule, which is configured on the Azure Firewall Policy (FP1). Other types of rules, such as network rules, URL filtering, and application rules, are not relevant to this specific scenario.

upvoted 9 times

omgMerrick

1 year, 3 months ago

Source: https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat-policy

upvoted 3 times

...

Lazylinux

Most Recent 8 months, 2 weeks ago

Selected Answer: C

I C is correct DNAT * External initiated * Destination IP changed * destination TCP/UDP * Scenario = Change Public IP (Firewall IP) to internal - Private IP when packets are coming into local network through firewall * Order = Before the routing decision outside to inside * Example = users on the internal accessing Web Server in data Center

upvoted 2 times

...

mVic

1 year, 3 months ago

Selected Answer: C

DNAT rule https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat-policy

upvoted 1 times

...