You have an Azure subscription that contains the virtual networks shown in the following table.
 
You plan to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.
To which virtual networks can you deploy AF1?

A. Vnet1 and Vnet4 only

B. Vnet1, Vnet2, Vnet3, and Vnet4

C. Vnet1 only

D. Vnet1 and Vnet2 only

E. Vnet1, Vnet2, and Vnet4 only






 

Suggested Answer: C

Azure Firewall operates in a single VNET.
Azure Firewall is a regional service.
Yes. Vnet1: Same VNET and same region.
No. Vnet2: Same Resource Group but different VNET and different region. Must be in the same region.
No. Vnet3: Different VNET, different region. Must be in the same region.
No. Vnet4: Different VNET, same region.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/networking/guide/well-architected-framework-azure-firewall

This question is in AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
For getting Microsoft Certified: Azure Network Engineer Associate Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.