MS-721 Question #35: Real Exam Question with Answer & Explanation

Question

You are planning a Microsoft Teams Phone deployment that will use Direct Routing. You need to allow traffic from Microsoft 365 to a Session Border Controller (SBC). Which IP address ranges should you allow through the firewall?

Options

• A8.8.8.8/32 and 4.4.2.2/32
• B52.112.0.0/14 and 52.120.0.0/14
• C132.245.0.0/16 and 40.104.0.0/15
• D10.10.0.0/24 and 10.11.0.0/24

Explanation

{"question_number": 4, "question": "Which IP address ranges should you allow through the firewall for Microsoft 365 to SBC traffic?", "correct_answer": "B. 52.112.0.0/14 and 52.120.0.0/14", "explanation": "Microsoft publishes specific IP address ranges that must be allowed through firewalls for Teams Phone and Direct Routing to function. The ranges 52.112.0.0/14 and 52.120.0.0/14 are the officially documented Microsoft Teams media and signaling IP ranges used by Microsoft 365 services. These ranges must be allowed inbound and outbound on the firewall protecting the SBC to permit SIP signaling and RTP/SRTP media traffic from Microsoft's infrastructure. The other options are incorrect: 8.8.8.8 is Google's DNS, 4.4.2.2 is not a Microsoft range, 132.245.0.0/16 and 40.104.0.0/15 are Exchange/SharePoint ranges (not Teams-specific), and 10.x.x.x are private RFC 1918 addresses that would never be routable from Microsoft's public cloud infrastructure.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.