Designing and Implementing Microsoft Azure Networking Solutions — Question 17

You have an Azure subscription that contains a virtual network named Vnet1. Vnet1 contains a virtual machine named VM1 and an Azure firewall named FW1.

You have an Azure Firewall Policy named FP1 that is associated to FW1.

You need to ensure that RDP requests to the public IP address of FW1 route to VM1.

What should you configure on FP1?

Answer options

• A. a network rule
• B. URL filtering
• C. a DNAT rule
• D. an application rule

Correct answer: C

Explanation

The correct answer is C, a DNAT rule, because it is specifically used to translate the public IP address of the firewall to the private IP address of the virtual machine, enabling RDP traffic to route correctly. The other options, such as a network rule, URL filtering, and an application rule, do not facilitate the translation needed for RDP connections.