Question: 1/50
You have a hub-and-spoke Azure virtual network topology. The hub contains an Azure Firewall. You need to ensure that all internet-bound traffic from spoke VNets is inspected by the firewall. What should you configure in each spoke VNet?
A user-defined route (0.0.0.0/0) that points to the Azure Firewall as the next hop
A Network Security Group (NSG) outbound rule that denies all internet traffic
A NAT gateway on each spoke subnet
A public IP address on each spoke VNet