nerdexam
Microsoft

MS-721 · Question #262

You are planning a Microsoft Teams Phone deployment that will use Direct Routing. You need to allow traffic from Microsoft 365 to a Session Border Controller (SBC). Which IP address ranges should you

The correct answer is B. 52.112.0.0/14 and 52.122.0.0/15. Microsoft publishes specific IP address ranges for Teams media and signaling traffic. The ranges 52.112.0.0/14 and 52.122.0.0/15 are the Microsoft Teams media processor and transport relay IP ranges that must be permitted inbound to an SBC for Direct Routing to function. These ar

Configure and manage Microsoft Teams Phone

Question

You are planning a Microsoft Teams Phone deployment that will use Direct Routing. You need to allow traffic from Microsoft 365 to a Session Border Controller (SBC). Which IP address ranges should you allow through the firewall?

Options

  • A8.8.8.8/32 and 4.4.2.2/32
  • B52.112.0.0/14 and 52.122.0.0/15
  • C10.10.0.0/24 and 10.11.0.0/24
  • D132.245.0.0/16 and 40.104.0.0/15

How the community answered

(52 responses)
  • A
    2% (1)
  • B
    94% (49)
  • C
    4% (2)

Explanation

Microsoft publishes specific IP address ranges for Teams media and signaling traffic. The ranges 52.112.0.0/14 and 52.122.0.0/15 are the Microsoft Teams media processor and transport relay IP ranges that must be permitted inbound to an SBC for Direct Routing to function. These are documented in Microsoft's official Office 365 URLs and IP ranges list under the 'Skype for Business Online and Microsoft Teams' category. Option A (8.8.8.8) is Google's public DNS, unrelated to Teams. Option C (10.x.x.x) are private RFC 1918 ranges, not Microsoft's public cloud IPs. Option D contains Microsoft Exchange Online and SharePoint ranges, not Teams signaling/media ranges.

Topics

#Microsoft Teams Phone#Direct Routing#Firewall configuration#IP address ranges

Community Discussion

No community discussion yet for this question.

Full MS-721 Practice