Exam AZ-500 topic 6 question 14 discussion

https://azure.microsoft.com/en-us/products/virtual-network-manager

I think this is the reason why the answer in examtopics is "D" https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub Create a secured virtual hub Using Firewall Manager in the Azure portal, you can either create a new secured virtual hub, or convert an existing virtual hub that you previously created using Azure Virtual WAN. You may configure Virtual WAN to enable inter-region security use cases in the hub by configuring routing intent. For more information on routing intent, see Routing Intent documentation. If i have to chose, i will go with D. Virtual network manager is not designed for security.

Azure Firewall Manager is designed to centrally manage security policies and route management for multiple Azure Firewall instances across different regions. It allows you to create and enforce security rules that can be synchronized across multiple regions, ensuring consistent security policies. Hesam

The correct answer is: D. Azure Firewall Manager Azure Firewall Manager allows you to centrally manage security policies and rule synchronization across multiple regions. It can be used in conjunction with Azure Virtual WAN to apply security policies, such as firewall rules, across the different virtual hubs in various regions like East US, West US, and North Europe. This meets the requirement of syncing security rules between the regions.

Azure firewall manager

To support the answer: Azure Firewall Manager can deploy an Azure Virtual WAN and synchronize between regions. Key points include: Azure Firewall Manager allows you to create secured virtual hubs, which are part of a Virtual WAN architecture. When creating a secured virtual hub, you can choose to create a new Virtual WAN or use an existing one Virtual WAN is designed to span multiple regions, allowing for global network connectivity Azure Firewall Manager supports central deployment and configuration of multiple Azure Firewall instances across different Azure regions and subscriptions Answer: D

To support the answer: Azure Firewall Manager allows for centralized deployment and configuration of multiple Azure Firewall instances spanning different Azure regions and subscriptions1. Key points: Firewall Policy is a global resource that can be used across multiple Azure Firewall instances in different regions and subscriptions1. Azure Firewall Manager enables central security policy and route management for globally distributed, software-defined perimeters Answer = D

"A secured virtual hub is an Azure Virtual WAN Hub with associated security and routing policies configured by Azure Firewall Manager." https://learn.microsoft.com/en-us/azure/firewall-manager/secure-cloud-network

Correct answer

In Exam20/07/2024

OK changing my answer, documentation for both describes this scenario but Firewall Manager is the more security focussed which makes sense for a security focussed exam

I think A because https://learn.microsoft.com/en-gb/azure/virtual-network-manager/tutorial-create-secured-hub-and-spoke

D. Azure Firewall Manager

https://learn.microsoft.com/en-us/azure/firewall-manager/overview#region-availability

D. Azure Firewall Manager

Secure Virtual Hub and traffic control among the 3 regions is for sure Azure Firewall Manager. Remember, this is a security focused exam.

To meet the requirements of creating three secured virtual hubs in different Azure regions and ensuring that security rules sync between the regions, you should use Azure Virtual WAN.