You have an Azure subscription that contains the virtual networks shown in the following table. You need to deploy an Azure firewall named AF1 to RG1 in the West US Azure region. To which virtual…

The correct answer is C. VNET1 only. Are there any firewall resource group restrictions? Yes. The firewall, VNet, and the public IP address all must be in the same resource group. https://learn.microsoft.com/en-us/azure/firewall/firewall-faq#are-there-any-firewall-resource- group-restrictions

Submitted by asante_acc· Mar 4, 2026Configure and manage virtual networking

Question

You have an Azure subscription that contains the virtual networks shown in the following table. You need to deploy an Azure firewall named AF1 to RG1 in the West US Azure region. To which virtual networks can you deploy AF1?

Exhibits

Options

AVNET1, VNET2, VNET3, and VNET4
BVNET1 and VNET2 only
CVNET1 only
DVNET1, VNET2, and VNET4 only
EVNET1 and VNET4 only

How the community answered

(15 responses)

B
7% (1)
C
80% (12)
E
13% (2)

Explanation

Are there any firewall resource group restrictions? Yes. The firewall, VNet, and the public IP address all must be in the same resource group. https://learn.microsoft.com/en-us/azure/firewall/firewall-faq#are-there-any-firewall-resource- group-restrictions

Community Discussion

No community discussion yet for this question.

Full AZ-104 Practice