nerdexam
Microsoft

AZ-120 · Question #136

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Option B (No) is correct because Azure Traffic Manager is a DNS-based global load balancer designed to direct user traffic across Azure regions or endpoints - it has no capability to control routing between subnets or between on-premises networks and Azure. It operates entirely…

Design and implement an infrastructure to support SAP workloads on Azure

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an SAP production landscape on-premises and an SAP development landscape on Azure. You deploy a network virtual appliance to act as a firewall between the Azure subnets and the on- premises network. You need to ensure that all traffic is routed through the network virtual appliance. Solution: You create an Azure Traffic Manager profile. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(23 responses)
  • A
    26% (6)
  • B
    74% (17)

Explanation

Option B (No) is correct because Azure Traffic Manager is a DNS-based global load balancer designed to direct user traffic across Azure regions or endpoints - it has no capability to control routing between subnets or between on-premises networks and Azure. It operates entirely at the DNS resolution layer, not at the network packet-routing layer.

The correct solution for forcing traffic through an NVA is to create User Defined Routes (UDRs) via a Route Table, specifying the NVA's private IP as the next hop, then associating that route table with the relevant Azure subnets. This overrides Azure's default system routes and ensures all traffic passes through the NVA firewall.

Why the distractor is tempting: Traffic Manager sounds like it "manages traffic," which misleads exam takers into thinking it controls packet flow - but it only influences which DNS endpoint a client resolves to, never actual IP routing.

Memory tip: Think of Traffic Manager as a global GPS dispatcher - it tells clients which destination to head toward, but it cannot redirect cars already on the road. UDRs are the actual road signs that force packets through a specific checkpoint (the NVA).

Topics

#network virtual appliance#firewall#hybrid connectivity#Azure security

Community Discussion

No community discussion yet for this question.

Full AZ-120 Practice