az-104 Practice Question 1748

Exam: az-104
Domain: Implement and manage virtual networking
Topic: Configure name resolution and routing
Difficulty: medium
A company named MediaCorp has a hybrid environment with on-premises servers and Azure Virtual Machines. They want to ensure that all traffic from their on-premises network can reach the Azure VMs without any issues. However, they are facing permission bottlenecks when configuring routes. What is the best approach to resolve this issue? (Choose one.)

Answer Options

A
Create a private DNS zone for the Azure VMs.
B
Configure a UDR with a 0.0.0.0/0 destination to the NVA.
C
Set up a virtual network peering between the on-premises network and Azure VNet.
D
Enable Azure Firewall on the Azure VMs.

Correct Answer

B: Configure a UDR with a 0.0.0.0/0 destination to the NVA.

Explanation

The correct answer is B. By configuring a User Defined Route (UDR) with a 0.0.0.0/0 destination to the Network Virtual Appliance (NVA), you ensure that all traffic from the on-premises network is routed through the NVA before reaching the Azure VMs. This allows for proper security checks and ensures that the traffic is properly directed. Option A is incorrect as it does not address the need for routing traffic through the NVA. Option C is incorrect as it only sets up a private DNS zone, which would not route traffic through the NVA. Option D is incorrect as it does not provide a way to route traffic from the on-premises network to the Azure VMs.