AZ-700 Question 184
Select 2You manage a Standard Azure Load Balancer with three Windows Server virtual machines in its backend pool. Each VM needs to be accessible via RDP from the internet using the same public IP address, but each VM must map to a different external port. You plan to configure inbound NAT rules on the load balancer to meet this requirement. Which two actions must you take when configuring the inbound NAT rules to allow RDP access to each VM?
- A
Assign a unique frontend port for each VM� inbound NAT rule and map it to the default RDP port (3389) of that VM.
- B
Place each VM in its own separate backend pool before creating the inbound NAT rules.
- C
Enable IP forwarding in each VM� network interface to allow traffic to be forwarded to its internal IP address.
- D
Associate each inbound NAT rule with the specific backend NIC or IP configuration for the intended VM.
Show answer and explanation
Correct answers: A, D
Explanation
When configuring inbound NAT rules on an Azure Load Balancer, you assign a unique frontend port that forwards to the VM's internal port (e.g., RDP at port 3389) and associate each rule with the respective VM's NIC/IP configuration. By doing so, traffic arriving on the specified frontend port is routed directly to the correct VM. You do not need separate backend pools for this scenario, and IP forwarding is not necessary for standard inbound NAT access. For more details, refer to Microsoft� documentation on load balancer inbound NAT rules: https://learn.microsoft.com/azure/load-balancer/load-balancer-overview.
- A. Correct.
Correct: You must specify a distinct frontend port for each inbound NAT rule, mapping it to port 3389 on the corresponding virtual machine. This allows external users to connect using a unique external port for each VM.
- B. Incorrect.
Incorrect: You can keep all three VMs in the same backend pool. Inbound NAT rules only need to point to the appropriate VM� NIC or IP, so separate backend pools are not mandatory.
- C. Incorrect.
Incorrect: IP forwarding is not required for inbound NAT rules to function. IP forwarding is typically used for network virtual appliances or routing scenarios.
- D. Correct.
Correct: An inbound NAT rule must be linked to the specific VM or NIC to direct inbound traffic to the correct target. This ensures that each rule correctly maps external traffic to the specific VM� RDP port.