AZ-700 Question 291
Single answerYou are a network engineer at Contoso. You've created an Azure Firewall Manager policy in the East US region that centralizes rule management for your Azure Firewall. Your organization is expanding to the West Europe region and deploys a new Azure Firewall there. You want to apply the same policy from East US to the new firewall in West Europe to ensure consistent security rules across both regions. How should you accomplish this?
- A
Create a separate Firewall Policy in the West Europe region and manually replicate all rules from the East US policy.
- B
Reuse the existing Firewall Policy in Azure Firewall Manager and associate it with the West Europe firewall.
- C
Clone the East US Firewall Policy in PowerShell and import it as a new policy for the West Europe firewall.
- D
Disassociate the East US firewall from the current policy, update the policy scope to include West Europe, and then reattach both firewalls.
Show answer and explanation
Correct answer: B
Explanation
Azure Firewall Manager lets you centrally manage firewall policies and reuse them across multiple Azure Firewall instances in different regions. You create a single Firewall Policy in one region and then associate it with additional firewalls in other regions, ensuring a consistent configuration without having to manually duplicate or recreate rules. For more details, refer to Microsoft� official documentation on Azure Firewall Manager policies.
- A. Incorrect.
Option 1 is incorrect. While you could create a separate policy, manually duplicating all rules is unnecessary and does not use Azure Firewall Manager's ability to share policies across multiple firewalls.
- B. Correct.
Option 2 is correct. Azure Firewall Manager allows you to use one Firewall Policy and associate it with multiple Azure Firewall instances across regions, eliminating the need to recreate policies from scratch.
- C. Incorrect.
Option 3 is incorrect. Although you can use PowerShell to manage policies, there is no requirement to clone an existing policy if you can simply reuse and associate it with another firewall in a different region.
- D. Incorrect.
Option 4 is incorrect. You do not need to disassociate the East US firewall or recreate scope coverage. You can associate additional firewalls directly without detaching the original ones.