AZ-104 Question 210
Single answerYou manage an Azure Virtual Network that includes multiple subnets, including Subnet A hosting a set of VMs. You have created a custom route table with a user-defined route that directs traffic for an on-premises range (10.50.0.0/16) to a Network Virtual Appliance (NVA) in a different subnet. However, Subnet A's VMs are still unable to reach the on-premises environment. Which step would ensure traffic is correctly routed to on-premises from Subnet A?
- A
Configure an inbound security rule on the Network Security Group (NSG) attached to Subnet A to allow traffic to 10.50.0.0/16
- B
Set the next hop type for the user-defined route to 'VNet Peering'
- C
Associate the custom route table with Subnet A
- D
Add an additional user-defined route for 0.0.0.0/0 with 'Internet' as the next hop type
Show answer and explanation
Correct answer: C
Explanation
To use a custom route, attach the route table that contains the user-defined route to the intended subnet. Once associated, traffic from that subnet follows the custom route (in this case, through the NVA to on-premises) rather than relying solely on default system routes.
- A. Incorrect.
Although inbound security rules may be required, they only permit or deny traffic and do not determine routing.
- B. Incorrect.
VNet Peering is not used as a next hop type for directing traffic to an NVA within the same virtual network.
- C. Correct.
Linking the route table to Subnet A ensures that the user-defined routes will be applied to traffic from that subnet.
- D. Incorrect.
This route sends default traffic to the Internet rather than to on-premises resources.