sc-900 Practice Question 1786
Exam: sc-900
Domain: Describe the capabilities of Microsoft security solutions
Topic: Describe core infrastructure security capabilities in Azure
Difficulty: medium
A hybrid environment at Contoso Ltd requires secure communication between on-premises servers and Azure resources. They have decided to use Azure Firewall to manage this. Which of the following steps should they follow to ensure secure and efficient traffic flow between the on-premises network and Azure resources?
Answer Options
A
Set up a site-to-site virtual private network (VPN) on-premises.
B
Configure Azure Firewall with appropriate rules and then establish a site-to-site VPN to connect on-premises networks to Azure.
C
Deploy an on-premises firewall and configure it to route traffic to Azure resources.
D
Create a new Azure Virtual Network and connect it to the on-premises network using a direct connection.
Correct Answer
B: Configure Azure Firewall with appropriate rules and then establish a site-to-site VPN to connect on-premises networks to Azure.
Explanation
The correct answer is B because it outlines the necessary steps to configure Azure Firewall for a hybrid environment, ensuring secure and efficient traffic flow. Option A is incorrect as it does not mention configuring the firewall rules or the connection between on-premises and Azure. Option C is incorrect as it focuses only on the on-premises network and does not address the Azure side. Option D is incorrect as it does not include the necessary steps for configuring the firewall and establishing the connection.