ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-700 All Questions

View all questions & answers for the AZ-700 exam
Go to Exam

Exam AZ-700 topic 4 question 6 discussion

Actual exam question from Microsoft's AZ-700
Question #: 6
Topic #: 4
[All AZ-700 Questions]

HOTSPOT -
You have an Azure firewall shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1:
If forced tunneling was enabled, the Firewall Subnet would be named AzureFirewallManagementSubnet. Forced tunneling can only be enabled during the creation of the firewall. It cannot be enabled after the firewall has been deployed.
Box 2:
The ג€Visit Azure Firewall Manager to configure and manage this firewallג€ link in the exhibit shows that the firewall is managed by Azure Firewall Manager.
by sadsak at Nov. 7, 2021, 11:26 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
jkklim
Highly Voted 2 years ago
from 1st diagram, if you see that Management Subnet and Management IP is empty, it means NO FORCE TUNNELING. And of course, force tunnelling can only be enabled during FW creation
upvoted 20 times
xRiot007
3 weeks, 1 day ago
The info is outdated: you can now enable forced tunneling after fw creation as well.
upvoted 1 times
...
...
Geo13AZ
Highly Voted 2 years, 3 months ago
The Answer is correct, but the explanation of the first question has a mistake, it says "the Firewall subnet" but it should be "the Management Subnet would be AzureFirewallManagementSubnet”. Also, the “Management Public IP” would be “ManagementPublicIP”. https://azure.microsoft.com/en-us/blog/azure-firewall-forced-tunneling-and-sql-fqdn-filtering-now-generally-available/
upvoted 16 times
...
Saba53
Most Recent 2 months, 2 weeks ago
First one is disabled but can be enabled second one is enabled already
upvoted 1 times
...
bobothewiseman
3 months ago
-It is disabled but can be enabled There seems to be a new feature. You can enable/ disable a force tunneling on pre existing firewall https://learn.microsoft.com/en-us/azure/firewall/management-nic
upvoted 3 times
...
Murad01
4 months, 3 weeks ago
Appeared on Exam November - 2023
upvoted 2 times
...
Lazylinux
7 months, 2 weeks ago
Given answer is correct and explanation is here https://learn.microsoft.com/en-us/azure/firewall/forced-tunneling#forced-tunneling-configuration
upvoted 4 times
...
BlackZeros
1 year, 7 months ago
Answer for both is Cannot be Enabled. "In Forced Tunneling mode, the Azure Firewall service incorporates the Management subnet (AzureFirewallManagementSubnet) for its operational purposes." This is clearly missing in the screenshot. https://learn.microsoft.com/en-us/azure/firewall/forced-tunneling
upvoted 1 times
MrBlueSky
1 year ago
Wrong. This AzureFirewallManagementSubnet is not the indicator for if it's being managed by Azure Firewall Manager. The fact that there is a a Firewall Policy attached to this is what indicates that Firewall Manager is already in use. Answers: 1. Cannot be Enabled 2. Already Enabled
upvoted 5 times
manhattan
3 months, 4 weeks ago
1. is disable but can be enable not sure if it's a new function but you can now enable the force tunneling in FW https://docs.azure.cn/en-us/firewall/management-nic#enable-the-management-nic-on-existing-firewalls
upvoted 2 times
bilzi
3 months, 1 week ago
For Standard and Premium firewall versions, the Firewall Management NIC must be manually enabled during the create process as shown previously, but all Basic Firewall versions and all Secured Hub firewalls always have a Management NIC enabled. THIS FIREWALL IS STANDARD
upvoted 2 times
...
...
...
...
Contactfornitish
2 years, 3 months ago
Appeared in exam on 17/01/2022
upvoted 2 times
...
Pravda
2 years, 3 months ago
Not on exam 1/6/2022
upvoted 3 times
...
AidenYoukhana
2 years, 3 months ago
The answers are correct!
upvoted 1 times
...
Pamban
2 years, 4 months ago
appeared on exam 5th Dec 2021
upvoted 3 times
...
sadsak
2 years, 5 months ago
This answer appears to be correct - https://docs.microsoft.com/en-us/azure/firewall/forced-tunneling#forced-tunneling-configuration
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago