nerdexam
Microsoft

AZ-500 · Question #161

SIMULATION You need to deploy an Azure firewall to a virtual network named VNET3. To complete this task, sign in to the Azure portal and modify the Azure resources. This task might take several…

Deploying an Azure Firewall to VNET3 requires first creating a dedicated subnet named exactly 'AzureFirewallSubnet' within the virtual network - this is a mandatory prerequisite enforced by Azure. Once the subnet exists, the Azure Firewall resource must be created in the same…

Submitted by kwame.gh· Mar 6, 2026Implement and manage virtual networking - specifically configuring Azure Firewall as a network security service within a virtual network, aligning with the AZ-104 'Configure and manage virtual networks' or AZ-700 'Design and implement network security' domain objectives.

Question

SIMULATION You need to deploy an Azure firewall to a virtual network named VNET3. To complete this task, sign in to the Azure portal and modify the Azure resources. This task might take several minutes to complete. You can perform other tasks while the task completes. Answer: To add an Azure firewall to a VNET, the VNET must first be configured with a subnet named AzureFirewallSubnet (if it doesn't already exist). Configure VNET3. 1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET3. Alternatively, browse to Virtual Networks in the left navigation pane. 2. In the Overview section, note the Location (region) and Resource Group of the virtual network. We'll need these when we add the firewall. 3. Click on Subnets. 4. Click on + Subnet to add a new subnet. 5. Enter AzureFirewallSubnet in the Name box. The subnet must be named AzureFirewallSubnet. 6. Enter an appropriate IP range for the subnet in the Address range box. 7. Click the OK button to create the subnet. Add the Azure Firewall. 1. In the settings of VNET3 click on Firewall. 2. Click the Click here to add a new firewall link. 3. The Resource group will default to the VNET3 resource group. Leave this default. 4. Enter a name for the firewall in the Name box. 5. In the Region box, select the same region as VNET3. 6. In the Public IP address box, select an available public IP address if one exists, or click Add new to add a new public IP address. 7. Click the Review + create button. 8. Review the settings and click the Create button to create the firewall.

Explanation

Deploying an Azure Firewall to VNET3 requires first creating a dedicated subnet named exactly 'AzureFirewallSubnet' within the virtual network - this is a mandatory prerequisite enforced by Azure. Once the subnet exists, the Azure Firewall resource must be created in the same region and resource group as VNET3, and associated with that specific subnet. This simulation tests hands-on knowledge of the Azure portal workflow and Azure Firewall's strict infrastructure requirements.

Topics

#Azure Firewall#Virtual Networks#Network Security#Azure Portal

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice