You are configuring and securing a network environment. You deploy an Azure virtual machine named VM1 that is configured to analyze network traffic. You need to ensure that all network traffic is…

Question

Options

• Aa system route
• Ba network security group (NSG)
• Ca user-defined route

• A
  18% (5)
• B
  11% (3)
• C
  71% (20)

Explanation

Explanation

A user-defined route (UDR) is correct because it allows you to override Azure's default routing behavior and manually specify that all network traffic must flow through a specific next-hop device - in this case, VM1 acting as a network virtual appliance (NVA). UDRs give administrators granular control to force traffic through security appliances for inspection, logging, or filtering.

Option A (system route) is incorrect because system routes are automatically created and managed by Azure; they cannot be customized or configured to redirect traffic through a specific VM - you can only override them, which is exactly what a UDR does.

Option B (NSG) is incorrect because NSGs are used to allow or deny traffic based on rules (a firewall-like function), not to redirect or route traffic through a specific device.

Memory Tip: Think of it this way - User-defined routes = User in control. Whenever an exam question asks you to force or redirect traffic through a specific VM or appliance, the answer is always a UDR. NSGs filter, UDRs redirect.

No community discussion yet for this question.