Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 5 question 98 discussion

Actual exam question from Microsoft's AZ-303

Question #: 98
Topic #: 5

Your company has an office in Seattle.
You have an Azure subscription that contains a virtual network named VNET1.
You create a site-to-site VPN between the Seattle office and VNET1.
VNET1 contains the subnets shown in the following table.

You need to route all Internet-bound traffic from Subnet1 to the Seattle office.
What should you create?

A. a route for GatewaySubnet that uses the virtual network gateway as the next hop
B. a route for GatewaySubnet that uses the local network gateway as the next hop
C. a route for Subnet1 that uses the local network gateway as the next hop
D. a route for Subnet1 that uses the virtual network gateway as the next hop

Show Suggested Answer

Suggested Answer: D 🗳️
A route with the 0.0.0.0/0 address prefix instructs Azure how to route traffic destined for an IP address that is not within the address prefix of any other route in a subnet's route table. When a subnet is created, Azure creates a default route to the 0.0.0.0/0 address prefix, with the Internet next hop type. We need to create a custom route in Azure to use a virtual network gateway in the Seattle office as the next hop.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

by ttaylor29 at Jan. 8, 2021, 5:12 a.m.

Comments

Submit Cancel

SnakePlissken

Highly Voted 4 years ago

Correct. Duplicate question: topic 1 question 47. https://www.examtopics.com/exams/microsoft/az-303/view/10/

upvoted 15 times

certpro

3 years, 10 months ago

Yes, duplicate question, but , careful, choices are not in the same order! Look for Subnet1 and Virtual Network Gateway combination

upvoted 3 times

suriyaswamy

3 years, 5 months ago

Verified

upvoted 1 times

...

DNeo

Highly Voted 4 years, 2 months ago

In my view, it should be C. Local Network Gateway represents the on-premise VPN device and that should be given as a Next Hope in user defined route for the internet. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-create-site-to-site-rm-powershell#:~:text=The%20local%20network%20gateway%20(LNG,you%20will%20create%20a%20connection.

upvoted 10 times

pentium75

3 years, 10 months ago

No, from Subnet1, next hop is the Virtual Network Gateway. https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

upvoted 3 times

...

shafqat

Most Recent 3 years, 8 months ago

Correct Forced tunneling on the gateway should have been configured. but from subnet 1, the next hop should be vpn gateway

upvoted 2 times

...

crazyaboutazure

3 years, 11 months ago

yep C is the answer

upvoted 1 times

...

VMUN

3 years, 11 months ago

26-June-21, Passed the exam. Correct Answer

upvoted 2 times

...

Ramkid

4 years ago

Given answer is correct, please check.. https://docs.microsoft.com/de-de/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

upvoted 6 times

Sizar

3 years, 10 months ago

Thankyou

upvoted 1 times

...

MadEgg

4 years, 4 months ago

Correct See: https://docs.microsoft.com/de-de/azure/vpn-gateway/vpn-gateway-forced-tunneling-rm

upvoted 5 times

...

ttaylor29

4 years, 5 months ago

Can someone explain this one to me?

upvoted 1 times

Stephan99

4 years, 4 months ago

See following link: https://docs.microsoft.com/de-de/learn/modules/connect-on-premises-network-with-vpn-gateway/3-exercise-prepare-azure-and-on-premises-vnets-using-azure-cli-commands Additionally a Subnet1 is used in the exam question. In oder to have connection to the Seattle office you must route the Subnet1 to the Virtual Network Gateway.

upvoted 2 times

...

prajster

4 years, 5 months ago

Answer D. they basically want all their internet traffic leaving the vm to got through the on prem Seattle DC. hence option D will make sure the UDR taking preference will force all traffic to the gateway as the next hop.

upvoted 12 times

...