Designing and Implementing Azure for AWS Professionals — Question 14

A company has a virtual machine (VM) named VM1 in a virtual network. The company also uses Azure Firewall Standard.

An administrator creates application rules to filter outbound traffic from VM1 and configure fully qualified domain names (FQDN) on the application rules.

The administrator discovers that outbound traffic from VM1 to the FQDNs are not being filtered by the firewall.

You need to resolve the issue with filtering.

What should you do first?

Answer options

• A. Create a CNAME type DNS record that references the firewall
• B. Upgrade to the Azure Firewall Premium SKU.
• C. Configure the firewall for a negative cache.
• D. Configure VM1 to use Azure Firewall as its DNS server.

Correct answer: D

Explanation

The correct answer is D because configuring VM1 to use Azure Firewall as its DNS server allows the firewall to process and filter the DNS requests correctly. The other options do not address the issue of DNS resolution, which is essential for the application rules to function properly.