AZ-120 · Question #88
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…
The correct answer is B. No. Configuring route filters for Microsoft peering does not meet the goal of directing traffic through an NVA firewall. Route filters are an ExpressRoute feature used to selectively advertise BGP routes for Microsoft cloud services (like Microsoft 365 or Azure public services)…
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an SAP production landscape on-premises and an SAP development landscape on Azure. You deploy a network virtual appliance to act as a firewall between the Azure subnet and the on-premises network. Solution: You configure route filters for Microsoft peering. Does this meet the goal?
Options
- AYes
- BNo
How the community answered
(44 responses)- A23% (10)
- B77% (34)
Explanation
Configuring route filters for Microsoft peering does not meet the goal of directing traffic through an NVA firewall. Route filters are an ExpressRoute feature used to selectively advertise BGP routes for Microsoft cloud services (like Microsoft 365 or Azure public services) - they control which routes are advertised, not how traffic is steered within or between subnets. To force traffic through an NVA, you need User Defined Routes (UDRs), which override Azure's default system routes and specify the NVA as the next hop for traffic leaving the subnet. Option A is wrong because route filters operate at the peering/BGP advertisement level and have no effect on routing traffic through a specific appliance.
Memory tip: Think of route filters as a menu selector (choosing which Microsoft services to receive routes for), while UDRs are the traffic cop (telling packets exactly which path to take). Whenever you see "NVA as firewall," the answer almost always involves UDRs.
Topics
Community Discussion
No community discussion yet for this question.