AZ-104 · Question #763
You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. You have a Network Virtual Appliance (NVA) named NetVA1. You need to ensure that the traffic from VNet1
The correct answer is B. a route table that has custom routes. To ensure traffic between peered VNets is inspected by a Network Virtual Appliance (NVA), you must use a route table with custom User-Defined Routes (UDRs).
Question
Options
- Aa local network gateway
- Ba route table that has custom routes
- Ca service endpoint
- DIP address reservations
How the community answered
(44 responses)- A7% (3)
- B82% (36)
- C2% (1)
- D9% (4)
Why each option
To ensure traffic between peered VNets is inspected by a Network Virtual Appliance (NVA), you must use a route table with custom User-Defined Routes (UDRs).
A local network gateway is used for connecting to on-premises networks and is not relevant for directing traffic between peered Azure VNets through an NVA.
To ensure traffic flowing from VNet1 to VNet2 (or vice-versa) is inspected by a Network Virtual Appliance (NVA), you must create a route table with User-Defined Routes (UDRs). These UDRs are applied to the relevant subnets and specify the NVA's IP address as the next hop for the destination VNet's address space, effectively forcing traffic through the NVA for inspection.
Service endpoints secure and optimize connectivity to Azure services but do not facilitate traffic inspection by an NVA between virtual networks.
IP address reservations assign static IP addresses but do not control traffic routing between virtual networks for NVA inspection.
Concept tested: Forcing traffic through NVA with UDRs
Source: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview#user-defined
Community Discussion
No community discussion yet for this question.