Home › Azure AZ-500 › cloudcomputing › az500networking › Which Azure Virtual Network feature should a sec…
Which Azure Virtual Network feature should a security engineer use to define custom routing — for example, forcing all egress traffic through an Azure Firewall before going to the internet?
ADisabling outbound NSG rules
BAzure Bastion
CUser-Defined Routes (UDRs) on the subnet route table
DAzure DNS
Answer & Solution
Correct answer: C. User-Defined Routes (UDRs) on the subnet route table
UDRs + a firewall next-hop is the canonical forced-tunnel pattern (per AZ-500 §2 VNet security). The others aren't routing.
Related questions
Which Azure tool should a security engineer use to capture and analyse VNet traffic flows Which Microsoft Defender for Cloud feature lets a security engineer OPEN management ports Which Azure service lets a security engineer SSH or RDP into a VM through the Azure portalWhich Azure networking feature should a security engineer use to give an Azure storage accWhich Azure networking feature should a security engineer use to give a VM-hosted workloadWhich Azure DDoS protection tier should a security engineer recommend for an internet-faciWhich Azure global edge service should a security engineer use to protect a globally-distrWhich Azure service is the canonical L7 application gateway with built-in Web Application