Correct Answer: Virtual WAN Hub with Azure Firewall (Secure Hub)
A Secure Hub in Virtual WAN automatically configures the necessary routing to ensure all VNet and branch traffic is inspected by the firewall with minimal manual effort....
Correct Answer
Virtual WAN Hub with Azure Firewall (Secure Hub)
Why This Answer Is Correct
A Secure Hub in Virtual WAN automatically configures the necessary routing to ensure all VNet and branch traffic is inspected by the firewall with minimal manual effort.
This question evaluates your knowledge of Azure Firewall — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Azure Firewall is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?
You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?
To inspect and filter all East-West traffic between your Azure VNets and North-South traffic from your VNet to the internet, which centralized security service should you deploy?
To protect your public-facing web applications from DDoS attacks that target the application layer (Layer 7), which feature of Azure Front Door or Application Gateway should you enable?
Which Azure security service allows you to centrally manage and deploy firewall rules across multiple virtual networks and regions using a single management policy?