exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 5 question 114 discussion

Actual exam question from Microsoft's AZ-104
Question #: 114
Topic #: 5
[All AZ-104 Questions]

You have an Azure subscription that contains the resources shown in the following table.



You need to manage outbound traffic from VNET1 by using Firewall1.

What should you do first?

  • A. Configure the Hybrid Connection Manager.
  • B. Upgrade ASP1 to the Premium SKU.
  • C. Create a route table.
  • D. Create an Azure Network Watcher.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
fatihaxi
Highly Voted 2 years, 4 months ago
Route all traffic to the firewall When you create a virtual network, Azure automatically creates a default route table for each of its subnets and adds system default routes to the table. In this step, you create a user-defined route table that routes all traffic to the firewall, and then associate it with the App Service subnet in the integrated virtual network. Section3 in document. https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall
upvoted 35 times
FabrityDev
2 years, 4 months ago
Agree with that
upvoted 2 times
...
DeBoer
2 years, 3 months ago
I have to (reluctantly) agree; normally I'd say RTs are for IaaS resources only and ASPs are a PaaS resource. However - all other answers make even less sense. IF we assume that the ASP has VNet integration and the switch to send all traffic across the VNet has been toggled then yes, a RT would work to force the traffic to the AF.
upvoted 2 times
...
...
zellck
Highly Voted 2 years, 3 months ago
Selected Answer: C
C is the answer. https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall#3-route-all-traffic-to-the-firewall When you create a virtual network, Azure automatically creates a default route table for each of its subnets and adds system default routes to the table. In this step, you create a user-defined route table that routes all traffic to the firewall, and then associate it with the App Service subnet in the integrated virtual network.
upvoted 6 times
...
0703448
Most Recent 2 months, 3 weeks ago
Selected Answer: C
Correct answer: C https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall#3-route-all-traffic-to-the-firewall:~:text=When%20you%20create,integrated%20virtual%20network.
upvoted 1 times
...
[Removed]
7 months, 3 weeks ago
Selected Answer: C
C is correct
upvoted 1 times
...
Amir1909
1 year, 2 months ago
C is correct
upvoted 1 times
...
er101q
2 years, 3 months ago
A. Configure the Hybrid Connection Manager. Before you can manage outbound traffic from VNET1 using Firewall1, you need to have the Hybrid Connection Manager configured. The Hybrid Connection Manager is required for Firewall1 to function as an outbound-only firewall. Once the Hybrid Connection Manager is configured, you can manage outbound traffic from VNET1 using Firewall1.
upvoted 1 times
GBAU
2 years, 3 months ago
No mention of Firewall to function as an outbound-only firewall. No mention of needing to ensure App1 goes through the firewall (App1 is a red herring) The ONLY thing you need to do is "manage outbound traffic from VNET1 by using Firewall1" Hence C: Create a route table.
upvoted 2 times
...
...
KingChuang
2 years, 4 months ago
Selected Answer: C
C. Create a route table. Step 3. Route all traffic to the firewall https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall
upvoted 1 times
...
FabrityDev
2 years, 4 months ago
Selected Answer: C
As described by fatihaxi and the source https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration it is the route table creation
upvoted 1 times
...
Ashfaque_9x
2 years, 4 months ago
Selected Answer: C
C. Create a route table.
upvoted 1 times
...
sss123412
2 years, 4 months ago
Correct answer B. Outbound traffic management using Azure Firewall is only available for App Service apps or function apps that are hosted on an App Service plan in the Premium SKU
upvoted 1 times
FabrityDev
2 years, 4 months ago
Where did you get that information from? I looked into https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration as well as source provided by fatihaxi and didn't find such information. On the other hand, creating a route table is explicitly described.
upvoted 1 times
...
GBAU
2 years, 3 months ago
The question is not asking how to get APP1 to connect through the firewall, its asking how to get VNET1 to connect through the Firewall (so you can manage its traffic). APP1 is a red herring in this question.
upvoted 2 times
...
...
[Removed]
2 years, 4 months ago
Definitly on the test and I answered it wrong lmao
upvoted 2 times
FabrityDev
2 years, 4 months ago
No one asked. If you want to comment then give some details. Which answer did you pick? Which answer is correct in your opinion?
upvoted 1 times
Onobhas01
2 years, 4 months ago
Dude mind your business. Though you don't care, some people actually care if a question has been in the exams recently.
upvoted 3 times
RougePotatoe
2 years, 3 months ago
Spend more time learning less time worrying about which questions are going to be on the test ROFL.
upvoted 1 times
...
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...