Exam AZ-720 topic 5 question 21 discussion

The Azure Firewall uses network rules to handle ICMP (Internet Control Message Protocol) traffic, as it's not application-based traffic. To verify if ICMP traffic is allowed to VM1, you should: A. Use the ping command targeting the IP address of VM1 and review the Network rules log of FW1. The network rules log of the Azure Firewall will show whether the ICMP packets are being allowed or blocked by FW1. Option B is not correct because the response of the ping command only tells you whether the ICMP request was successful or not. It does not indicate if the ICMP traffic is allowed through FW1 or not. Option C is not correct because there is no "Infrastructure rules log" in Azure Firewall. Option D is not correct because the FQDN is not used in ICMP traffic, ICMP operates on the network layer and uses IP addresses, not domain names. Also, similar to B, this will not indicate whether the ICMP traffic is being allowed or blocked by FW1.