Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-700 Exam - Topic 1 Question 98 Discussion

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an Azure Virtual Desktop host pool named Pool1.You need to implement Azure Firewall and TLS inspection for all the outbound traffic from Pool1.Which two resources should you configure? Each correct answer present part of the solution.NOTE: Each correct answer is worth one point
D) an Azure NAT gateway and F) a managed identity
A) an Azure Private DNS zone
B) a private endpoint
C) an Azure key vault
E) a Microsoft Entra enterprise app

Microsoft AZ-700 Exam - Topic 1 Question 98 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 98
Topic #: 1
[All AZ-700 Questions]

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains an Azure Virtual Desktop host pool named Pool1.

You need to implement Azure Firewall and TLS inspection for all the outbound traffic from Pool1.

Which two resources should you configure? Each correct answer present part of the solution.

NOTE: Each correct answer is worth one point

Show Suggested Answer Hide Answer
Suggested Answer: D, F

by Lettie at May 13, 2026, 02:37 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Rikki
1 day ago
A helps with DNS resolution for private endpoints.
upvoted 0 times
...
Bambi
7 days ago
Why A?
upvoted 0 times
...
Rikki
12 days ago
I think A and D are the right answers.
upvoted 0 times
...
Lizette
17 days ago
This question is tricky!
upvoted 0 times
...
Candida
22 days ago
Private DNS zone is also important for name resolution!
upvoted 0 times
...
Annice
27 days ago
I thought a key vault was for secrets, not for traffic management?
upvoted 0 times
...
Melissia
1 month ago
Wait, why would you need a private endpoint for this?
upvoted 0 times
...
Rupert
1 month ago
Definitely agree, NAT gateway is essential here!
upvoted 0 times
...
Vallie
1 month ago
You need an Azure NAT gateway for outbound traffic.
upvoted 0 times
...
Colton
2 months ago
I thought managed identities were for authentication, not traffic management?
upvoted 0 times
...
Luisa
2 months ago
A Private DNS zone might be useful too, but not sure about that.
upvoted 0 times
...
Vallie
2 months ago
Wait, why would you need a private endpoint for this?
upvoted 0 times
...
Stephane
2 months ago
Totally agree, NAT gateway is essential here!
upvoted 0 times
...
Demetra
2 months ago
You need an Azure NAT gateway for outbound traffic.
upvoted 0 times
...
Leota
2 months ago
I practiced a similar question where we had to set up security for outbound traffic, and I think the private endpoint could be important for that.
upvoted 0 times
...
Lyla
3 months ago
I feel like the Azure key vault might be relevant for managing secrets, but I’m not confident it directly relates to TLS inspection.
upvoted 0 times
...
Janet
3 months ago
I'm not entirely sure, but I remember something about NAT gateways being used for outbound traffic. Could that be one of the correct options?
upvoted 0 times
...
Mila
4 months ago
I think we need to configure something related to DNS for the Azure Firewall, so maybe the Azure Private DNS zone could be one of the answers?
upvoted 0 times
...

Save Cancel