Exam AZ-700 topic 4 question 66 discussion

Actual exam question from Microsoft's AZ-700

Question #: 66
Topic #: 4

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an Azure Virtual Desktop host pool named Pool1.

You need to implement Azure Firewall and TLS inspection for all the outbound traffic from Pool1.

Which two resources should you configure? Each correct answer present part of the solution.

NOTE: Each correct answer is worth one point.

A. an Azure Private DNS zone
B. a private endpoint
C. an Azure key vault
D. an Azure NAT gateway
E. a Microsoft Entra enterprise app
F. a managed identity

Show Suggested Answer

Suggested Answer: CF 🗳️

by maciek8131 at Nov. 29, 2024, 5:52 p.m.

Comments

Submit Cancel

KarlosRC

Highly Voted 6 months, 4 weeks ago

Selected Answer: CF

https://www.keytos.io/docs/azure-pki/azure-certificate-management/how-to-issue-tls-certificates-for-azure-firewall/

upvoted 9 times

...

PL5423232909

Most Recent 3 months, 1 week ago

Selected Answer: CF

Correct.

upvoted 1 times

...

manhattan

6 months, 2 weeks ago

Selected Answer: CF

it should be correct https://techcommunity.microsoft.com/blog/azurenetworksecurityblog/building-a-poc-for-tls-inspection-in-azure-firewall/3676723 ransport Layer Security (TLS) Inspection feature of Azure Firewall Premium by using the Certification Auto-Generation mechanism, which automatically creates the following three resources for you: Managed Identity Key Vault Self-signed Root CA certificate

upvoted 3 times

...

maciek8131

7 months ago

Selected Answer: CD

I think that we need NAT for that if that's outbound

upvoted 2 times

KarlosRC

6 months, 3 weeks ago

Nat not related to tls inspection only to outbound traffic

upvoted 2 times

...