AZ-104 Question 202
Single answerYou have two virtual networks, VNET1 and VNET2, in separate regions. VNET1 hosts a network virtual appliance (NVA) that you want VNET2 to use for Internet egress. You plan to create a virtual network peering between VNET1 and VNET2 to enable this configuration. Which settings must you enable so that VNET2 can route outbound traffic through the NVA in VNET1?
- A
Enable 'Allow gateway transit' on VNET1's peering to VNET2 and 'Use remote gateways' on VNET2's peering to VNET1
- B
Enable 'Allow gateway transit' on VNET2's peering to VNET1 and 'Use remote gateways' on VNET1's peering to VNET2
- C
Enable 'Allow forwarded traffic' on both peerings
- D
Manually configure UDRs on both VNETs to point to the NVA in VNET1
Show answer and explanation
Correct answer: A
Explanation
To route traffic from VNET2 through VNET1’s NVA, VNET1 must 'Allow gateway transit' so that its gateway (or NVA) is available for remote use, and VNET2 must 'Use remote gateways' to direct its outbound traffic via VNET1.
- A. Correct.
This is the correct setting to allow VNET2 to use VNET1's gateway or NVA for outbound traffic. VNET1 sets 'Allow gateway transit', and VNET2 sets 'Use remote gateways'.
- B. Incorrect.
The gateway transit option must be enabled on the VNET hosting the gateway (VNET1), not on the remote VNET (VNET2).
- C. Incorrect.
Enabling 'Allow forwarded traffic' alone is insufficient for VNET2 to use VNET1’s NVA for Internet egress. You need the gateway transit options.
- D. Incorrect.
While you may need to adjust user-defined routes for more complex routing scenarios, without the correct peering settings, VNET2 cannot use VNET1’s gateway or NVA.