You have an Azure virtual network that contains the subnets shown in the following table.
 
You deploy an Azure firewall to AzureFirewallSubnet. You route all traffic from Subnet2 through the firewall.
You need to ensure that all the hosts on Subnet2 can access an external site located at https://*.contoso.com.
What should you do?

A. In a firewall policy, create a DNAT rule.

B. Create a network security group (NSG) and associate the NSG to Subnet2.

C. In a firewall policy, create a network rule.

D. In a firewall policy, create an application rule.








 

Suggested Answer: D

Reference:
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

This question is in AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
For getting Microsoft Certified: Azure Network Engineer Associate Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.