nerdexam
Microsoft

AZ-700 · Question #170

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1. You have an Azure Firewall Policy named FP1…

The correct answer is C. a DNAT rule. To allow RDP requests to reach VM1 through the public IP of FW1, you need to create a rule that translates the destination IP address of the incoming RDP requests to the private IP address of VM1. This is done through a type of rule called a DNAT rule, which is configured on…

Submitted by femi9· Apr 18, 2026

Question

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1. You have an Azure Firewall Policy named FP1 that is associated to FW1. You need to ensure that RDP requests to the public IP address of FW1 route to VM1. What should you configure on FP1?

Options

  • Aa network rule
  • BURL filtering
  • Ca DNAT rule
  • Dan application rule

How the community answered

(28 responses)
  • A
    7% (2)
  • B
    4% (1)
  • C
    86% (24)
  • D
    4% (1)

Explanation

To allow RDP requests to reach VM1 through the public IP of FW1, you need to create a rule that translates the destination IP address of the incoming RDP requests to the private IP address of VM1. This is done through a type of rule called a DNAT rule, which is configured on the Azure Firewall Policy (FP1). Other types of rules, such as network rules, URL filtering, and application rules, are not relevant to this specific scenario. https://learn.microsoft.com/en-us/azure/firewall/tutorial-firewall-dnat-policy

Community Discussion

No community discussion yet for this question.

Full AZ-700 Practice