Microsoft
AZ-305 · Question #295
Your company has offices in North America and Europe. You plan to migrate to Azure. You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following…
The correct answer is A. Azure Virtual WAN with a secured virtual hub. The Virtual WAN meets the first 3 requirements, and the secured virtual hub has the Azure Firewall Manager, which can do the FQDN filtering. https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub…
Submitted by haruto_sh· Mar 6, 2026Design infrastructure solutions
Question
Your company has offices in North America and Europe. You plan to migrate to Azure. You need to recommend a networking solution for the new Azure infrastructure. The solution must meet the following requirements: - The Point-to-Site (P2S) VPN connections of mobile users must connect automatically to the closest Azure region. - The offices in each region must connect to their local Azure region by using an ExpressRoute circuit. - Transitive routing between virtual networks and on-premises networks must be supported. - The network traffic between virtual networks must be filtered by using FQDNs. What should you include in the recommendation?
Options
- AAzure Virtual WAN with a secured virtual hub
- Bvirtual network peering and application security groups
- Cvirtual network gateways and network security groups (NSGs)
- DAzure Route Server and Azure Network Function Manager
How the community answered
(28 responses)- A71% (20)
- B7% (2)
- C4% (1)
- D18% (5)
Explanation
The Virtual WAN meets the first 3 requirements, and the secured virtual hub has the Azure Firewall Manager, which can do the FQDN filtering. https://learn.microsoft.com/en-us/azure/firewall-manager/secured-virtual-hub https://learn.microsoft.com/en-us/azure/firewall/fqdn-filtering-network-rules
Topics
#Azure Virtual WAN#secured virtual hub#ExpressRoute#P2S VPN
Community Discussion
No community discussion yet for this question.