Microsoft
AZ-700 · Question #21
You have an Azure virtual network that contains the subnets shown in the following table. You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall.
Sign in or unlock AZ-700 to reveal the answer and full explanation for question #21. The question stem and answer options stay visible for context.
Submitted by marco_it· Apr 18, 2026Design and implement Azure network security services
Question
You have an Azure virtual network that contains the subnets shown in the following table. You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall. You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com. What should you do?
Options
- ACreate a network security group (NSG) and associate the NSG to Subnet2.
- BIn a firewall policy, create an application rule.
- CIn a firewall policy, create a DNAT rule.
- DIn a firewall policy, create a network rule.
Unlock AZ-700 to see the answer
You've previewed enough free AZ-700 questions. Unlock AZ-700 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure Firewall#Firewall Policy#Application Rules#FQDN filtering