AZ-700 practice question 2 of 35

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that…

Choose your answer, then check it against the explanation.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals- Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have on Azure subscription that contains an Azure Virtual WAN named VWAN1. VWAN1 contains a hub named Hub1. Hub! has a security status of Unsecured. You need to ensure that the security status of Hub1 is marked as Secured. Solution: You implement Azure NAT Gateway. Does this meet the requirement?

Answer options

Correct Answer:

Explanation

The security status of an Azure Virtual WAN hub is designated as "Secured" only when a security provider is deployed within it. This is achieved by converting the hub into a "Secured Virtual Hub" using Azure Firewall Manager to deploy either Azure Firewall or a supported third-party security provider. Azure NAT Gateway is a service that provides Source Network Address Translation (SNAT) for outbound internet connectivity from a virtual network. It does not provide the traffic inspection and filtering capabilities required to change the hub's security status.

Why Incorrect

A. Yes: This is incorrect. Implementing Azure NAT Gateway provides outbound connectivity but does not fulfill the requirement of deploying a security provider like Azure Firewall, which is necessary to mark the hub as "Secured".

References

1. Microsoft Learn

Azure Virtual WAN documentation

"What is a secured virtual hub?": This document explicitly states

"A secured virtual hub is an Azure Virtual WAN hub with security and routing policies configured by Azure Firewall Manager." It further clarifies that this involves deploying Azure Firewall or a third-party security provider.

Source: https://learn.microsoft.com/en-us/azure/virtual-wan/secured-virtual-hub

Section: "What is a secured virtual hub?".

2. Microsoft Learn

Azure Virtual WAN documentation

"How to configure Azure Firewall in a Virtual WAN hub": This guide details the process of securing a hub. The overview states

"This article shows you how to secure your virtual hub using Azure Firewall Manager." This confirms that Azure Firewall is the mechanism for securing the hub.

Source: https://learn.microsoft.com/en-us/azure/virtual-wan/howto-secure-virtual-hub

Section: "Overview".

3. Microsoft Learn

Azure NAT Gateway documentation

"What is Azure NAT Gateway?": This document defines the service's purpose: "Azure NAT Gateway is a fully managed and highly resilient Network Address Translation (NAT) service... to allow all instances in a private subnet to connect outbound to the internet while remaining fully private." This confirms its role is for outbound connectivity

not hub security.

Source: https://learn.microsoft.com/en-us/azure/nat-gateway/nat-overview

Section: "What is Azure NAT Gateway?".

Question 2 of 35

Keep practicing

Take the free AZ-700 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test