Exam AZ-300 topic 1 question 20 discussion

1. Address Prefix 10.0.0.0/16 - Because routing table will be applied to this VNET. 2. Next hop type "Virtual appliace" - because as mentioned in ques all inbound traffic must be routed through VM1 which will act as virtual appliance 3. Assigned to "Gateway Subnet" - because all incoming traffic to this vnet will first hit the Gateway which is in gateway subnet.

Correct: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

given answer is correct 1. Address Prefix 10.0.0.0/16 - Because routing table will be applied to this VNET. 2. Next hop type "Virtual appliance" - because as mentioned in ques all inbound traffic must be routed through VM1 which will act as virtual appliance 3. Assigned to "Gateway Subnet" - because all incoming traffic to this vnet will first hit the Gateway which is in gateway subnet.

question came in exam 23 sep,2020

Look to the Routing Example: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

https://docs.microsoft.com/en-us/cli/azure/network/route-table/route?view=azure-cli-latest

Answer is correct.

Answer Correct, Appeared in AZ-104 Exam

The question by itself is buggy. 10.0.0.0/16 Virtual Appliance 3rd question is buggy, since we cannot go with subnet 0 and subnet 1 and 2. I will say just pick Gateway subnet.

(1) (Implicitly mentioned, or just indicated by the name "Gateway Subnet") ---- All the incoming traffic to VNet1 goes through the "Gateway Subnet". Therefore, to control the traffic, a Routing Table needs to be assigned to the "Gateway Subnet" (2) After after, all the traffic needs to be controlled by the Network Virtual Appliance (NVA). Therefore, the next hop is "Virtual Appliance" (when deploying, also putting in its IP) (3) The NVA needs to control the traffic for ALL Virtual Network (VNet1). Therefore, the (target) Address Prefix needs to be the entire Address Range for the VNet1.

We assign for the gatewaysubnet (where we expect all outside traffic to arrive in) the very route 10.0.0.0/16 (as this encompasses all other ranges of internal IPs) and we send all traffic to the virtual appliance. In practice, you'd also enter the IP address of that virtual appliance in order to make the traffic from the gateway subnet reach it, however this last point is not asked in this question.

Address prefix: 10.0.0./16 (Route all inbound traffic to VNET) Next Hop: Virtual Appliance Subnet: GatewaySubnet Because for all Inbound traffic nothing mentioned to restrict, so it is Public Subnet in our case gateway subnet (Public/Private/DMZ)

Answer is correct

Gateway subnet is for virtual network gateway, not for virtual appliance. There is problem in the question itself.

10.0.0.0/16 because you need to route inbound traffic to the vnet address space Virtual appliance - this lets you specify vm1 ip as next hop Gatewaysubnet - because inbound traffic is coming in to whatever VPN/ER gateway is deployed here therefore route needs to be applied here.

I think its incorrect. Why are you using the vNet IP Space if you are deploying the Virtual Gateway Appliance to the Gateway Subnet? https://docs.microsoft.com/en-us/windows-server/networking/sdn/manage/use-network-virtual-appliances-on-a-vn Answer: 10.0.254.0/24 Virtual Appliance Gateway Subnet