Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam

Exam AZ-700 topic 4 question 6 discussion

Actual exam question from Microsoft's AZ-700

Question #: 6
Topic #: 4

HOTSPOT -
You have an Azure firewall shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1:
If forced tunneling was enabled, the Firewall Subnet would be named AzureFirewallManagementSubnet. Forced tunneling can only be enabled during the creation of the firewall. It cannot be enabled after the firewall has been deployed.
Box 2:
The ג€Visit Azure Firewall Manager to configure and manage this firewallג€ link in the exhibit shows that the firewall is managed by Azure Firewall Manager.

by sadsak at Nov. 7, 2021, 11:26 a.m.

Comments

Submit Cancel

jkklim

Highly Voted 2 years, 2 months ago

from 1st diagram, if you see that Management Subnet and Management IP is empty, it means NO FORCE TUNNELING. And of course, force tunnelling can only be enabled during FW creation

upvoted 20 times

xRiot007

3 months, 1 week ago

The info is outdated: you can now enable forced tunneling after fw creation as well.

upvoted 1 times

...

Geo13AZ

Highly Voted 2 years, 6 months ago

The Answer is correct, but the explanation of the first question has a mistake, it says "the Firewall subnet" but it should be "the Management Subnet would be AzureFirewallManagementSubnet”. Also, the “Management Public IP” would be “ManagementPublicIP”. https://azure.microsoft.com/en-us/blog/azure-firewall-forced-tunneling-and-sql-fqdn-filtering-now-generally-available/

upvoted 16 times

...

Saba53

Most Recent 5 months ago

First one is disabled but can be enabled second one is enabled already

upvoted 1 times

...

bobothewiseman

5 months, 3 weeks ago

-It is disabled but can be enabled There seems to be a new feature. You can enable/ disable a force tunneling on pre existing firewall https://learn.microsoft.com/en-us/azure/firewall/management-nic

upvoted 3 times

...

Murad01

7 months, 2 weeks ago

Appeared on Exam November - 2023

upvoted 2 times

...

Lazylinux

10 months ago

Given answer is correct and explanation is here https://learn.microsoft.com/en-us/azure/firewall/forced-tunneling#forced-tunneling-configuration

upvoted 4 times

...

BlackZeros

1 year, 9 months ago

Answer for both is Cannot be Enabled. "In Forced Tunneling mode, the Azure Firewall service incorporates the Management subnet (AzureFirewallManagementSubnet) for its operational purposes." This is clearly missing in the screenshot. https://learn.microsoft.com/en-us/azure/firewall/forced-tunneling

upvoted 1 times

MrBlueSky

1 year, 3 months ago

Wrong. This AzureFirewallManagementSubnet is not the indicator for if it's being managed by Azure Firewall Manager. The fact that there is a a Firewall Policy attached to this is what indicates that Firewall Manager is already in use. Answers: 1. Cannot be Enabled 2. Already Enabled

upvoted 5 times

manhattan

6 months, 2 weeks ago

1. is disable but can be enable not sure if it's a new function but you can now enable the force tunneling in FW https://docs.azure.cn/en-us/firewall/management-nic#enable-the-management-nic-on-existing-firewalls

upvoted 2 times

bilzi

5 months, 3 weeks ago

For Standard and Premium firewall versions, the Firewall Management NIC must be manually enabled during the create process as shown previously, but all Basic Firewall versions and all Secured Hub firewalls always have a Management NIC enabled. THIS FIREWALL IS STANDARD

upvoted 2 times

...