Microsoft Exam AZ-500 Topic 10 Question 78 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 78
Topic #: 10

You have an Azure subscription that contains the resources shown in the following table.

You need to configure AFW1 to only allow traffic from VM1 to storage accounts in the West US Azure region. The solution must minimize administrative effort.

What should you configure?

Aa DNAT rule

Ba network rule

Can SNAT private IP address range

Dan application rule

Show Suggested Answer

Suggested Answer: B

by Edwin at Jan 14, 2025, 04:27 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shantay

11 days ago

But wouldn't a network rule be more specific and efficient in this scenario?

upvoted 0 times

...

Jina

14 days ago

I disagree, I believe the answer is A) a DNAT rule.

upvoted 0 times

...

1 months ago

Hmm, I'm not sure. B) a network rule seems like the most straightforward option, but D) an application rule could also work if we need to specify the specific application protocol and port.

upvoted 0 times

...

I think the answer is B) a network rule. This would allow us to configure the firewall to only allow traffic from VM1 to the specific storage accounts in the West US region, which is what the question is asking for.

upvoted 0 times

Jenelle

1 days ago

I agree, B) a network rule is the correct answer.

upvoted 0 times

...

Microsoft Exam AZ-500 Topic 10 Question 78 Discussion

Contribute your Thoughts:

Shantay

Jina

Evan

Sheridan

Lorean

Hannah

Shantay

Cherilyn

Brynn

Jenelle