AZ-700 · Question #158
You have an Azure subscription mat contains tour virtual networks named VNet1, VNet2, VNet3, and VNet4. You plan to deploy a hub and spoke topology by using virtual network peering. You need to config
The correct answer is D. Azure Firewall. If you need connectivity between spokes, consider deploying Azure Firewall or another NVA in the hub. Then create routes to forward traffic from a spoke to the firewall or NVA, which can then route to the second spoke. In this scenario, you must configure the peering connections
Question
You have an Azure subscription mat contains tour virtual networks named VNet1, VNet2, VNet3, and VNet4. You plan to deploy a hub and spoke topology by using virtual network peering. You need to configure VNet1 as the hub network. The solution must meet the following requirements:
- Support transitive routing between spokes.
- Maximize network throughput.
What should you include in the solution?
Options
- AAzure VPN Gateway
- BAzure Route Server
- CAzure Private Link
- DAzure Firewall
How the community answered
(26 responses)- A12% (3)
- B8% (2)
- C4% (1)
- D77% (20)
Explanation
If you need connectivity between spokes, consider deploying Azure Firewall or another NVA in the hub. Then create routes to forward traffic from a spoke to the firewall or NVA, which can then route to the second spoke. In this scenario, you must configure the peering connections to allow forwarded traffic. You can also use a VPN gateway to route traffic between spokes, although this choice affects latency and throughput. For configuration details, see Configure VPN gateway transit for virtual network peering. https://learn.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid- networking/hub-spoke?tabs=cli
Community Discussion
No community discussion yet for this question.