AZ-104 Question 209
Single answerYou have created a route table with a user-defined route that directs all outbound traffic (0.0.0.0/0) to a Network Virtual Appliance (NVA) in SubnetB. However, traffic from SubnetA is still not being inspected by the NVA. Which configuration step should you take first to ensure SubnetA’s traffic is properly redirected to the NVA?
- A
Associate the custom route table with SubnetA
- B
Enable IP forwarding on the network interface of the NVA
- C
Add a user-defined route for the SubnetA address range pointing to the NVA IP
- D
Enable forced tunneling in the Azure VNet for inbound connections
Show answer and explanation
Correct answer: A
Explanation
To apply a user-defined route, you must associate the route table with the target subnet. Once the route table is properly associated with SubnetA, any outbound traffic from that subnet will be redirected to the NVA as specified by the user-defined route.
- A. Correct.
Associating the route table with the correct subnet is necessary for its routing rules to apply to that subnet’s traffic. Without this step, custom routes are not enforced.
- B. Incorrect.
Enabling IP forwarding on the NVA is an important prerequisite for routing traffic, but it does not alone ensure traffic from SubnetA is redirected. The route table must still be associated with SubnetA first.
- C. Incorrect.
By default, Azure automatically routes traffic within the same VNet. A user-defined route for the subnet’s own address range (SubnetA) is not typically needed. You want a default route (0.0.0.0/0) to redirect all internet traffic to the NVA instead.
- D. Incorrect.
Forced tunneling is typically used to send outbound traffic to an on-premises VPN or firewall, not to inspect traffic within the same VNet using an NVA.