AZ-700 · Question #85
Regional VNet Integration enables connecting to a VNet in the same region with no need for a gateway. While using VNet Integration with VNets in the same region, which of the below Azure networking fe
The correct answer is E. Network security groups (NSGs). Outbound traffic can be blocked with an NSG that is located on your integration subnet. Here, the inbound rules do not apply as VNet Integration can’t be used to support the inbound access to your application. Option A is incorrect. A route table can be placed on the integration
Question
Regional VNet Integration enables connecting to a VNet in the same region with no need for a gateway. While using VNet Integration with VNets in the same region, which of the below Azure networking features would you use to block outbound traffic?
Options
- ARoute Tables(UDRs)
- BDomain Name Service
- CTraffic Manager
- DFront Door
- ENetwork security groups (NSGs)
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C12% (3)
- E81% (21)
Explanation
Outbound traffic can be blocked with an NSG that is located on your integration subnet. Here, the inbound rules do not apply as VNet Integration can’t be used to support the inbound access to your application. Option A is incorrect. A route table can be placed on the integration subnet to direct/deliver outbound traffic at desired locations. Option B is incorrect. Azure DNS offers name resolution with the help of Microsoft Azure infrastructure and is not a related Azure Networking feature. Option C is incorrect. Traffic Manager is a Load balancing solution. Option D is incorrect. Front Door is also a load balancing solution. Option E is correct. NSGs help in blocking outbound traffic. https://docs.microsoft.com/en-us/azure/app-service/web-sites-integrate-with- vnet?WT.mc_id=modinfra-33046-thmaure
Community Discussion
No community discussion yet for this question.