AZ-700 Question 57
Select 2You have designed a virtual network in Azure with an NVA (Network Virtual Appliance) for traffic inspection. The NVA is BGP-enabled, and your on-premises environment is connected via an ExpressRoute private peering. You want to use Azure Route Server to dynamically disseminate routes so that on-premises traffic to Azure subnets and vice versa goes through the NVA for inspection. Which two actions should you include to ensure Azure Route Server successfully advertises the appropriate routes to both on-premises and Azure subnets? (Choose two.)
- A
A) Enable the 'IP forwarding' setting on the subnet that hosts the Azure Route Server.
- B
B) Configure a BGP peering session between the NVA and Azure Route Server.
- C
C) Configure a BGP peering session between the ExpressRoute gateway and Azure Route Server.
- D
D) Enable route propagation in all Azure subnets by setting 'Propagate gateway routes' to 'Disabled'.
- E
E) Manually create user-defined routes in every subnet, pointing to the NVA's private IP as the next hop.
Show answer and explanation
Correct answers: B, C
Explanation
To take full advantage of Azure Route Server, you must establish BGP sessions between Azure Route Server and devices (or gateways) that need dynamic route exchanges. In this scenario, setting up BGP with both the NVA and the ExpressRoute gateway ensures automatic route learning and advertisement. By contrast, manually configuring user-defined routes for each subnet or disabling route propagation undermines the benefits of dynamic routing. For more information, refer to the official Microsoft documentation on Azure Route Server configuration and best practices: https://learn.microsoft.com/azure/route-server/overview.
- A. Incorrect.
A) Incorrect. The NVA's subnet may require 'IP forwarding,' but Azure Route Server itself does not require enabling 'IP forwarding' on its hosting subnet. The subnet IP forwarding setting is primarily for NVAs, not for the Route Server.
- B. Correct.
B) Correct. Azure Route Server relies on BGP peering with the NVA to learn and propagate routes exchanged between the NVA and Azure environments.
- C. Correct.
C) Correct. Configuring a BGP peering session between the ExpressRoute gateway and Azure Route Server ensures that on-premises routes and Azure routes (including those from the NVA) are exchanged dynamically.
- D. Incorrect.
D) Incorrect. You usually keep 'Propagate gateway routes' enabled if you want Azure subnets to learn routes from on-premises or other BGP peers. Disabling route propagation would prevent dynamic advertising from the Route Server.
- E. Incorrect.
E) Incorrect. While user-defined routes may be used in some scenarios, one of the key advantages of Azure Route Server is to dynamically handle routes via BGP. Manually creating UDRs for every subnet is unnecessary and defeats the purpose of dynamic routing.