You have an Azure subscription that contains the virtual networks shown in the following table.

You plan to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.
To which virtual networks can you deploy AF1?
Suggested Answer: C
Get Premium AZ-700 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
RA
Rasheeda
11 months ago
Wait, are you sure about that? Sounds off to me.
PA
Pansy
12 months ago
I agree, Vnet1 and Vnet4 is the right choice!
HO
Hollis
12 months ago
Definitely Vnet1 and Vnet2 only.
BE
Ben
1 year ago
AF1 can be deployed to Vnet1 and Vnet4 only.
JU
Jutta
1 year ago
I feel like the answer might be C, since it includes Vnet1, Vnet2, and Vnet4, but I remember there was a similar question where only specific networks were allowed.
DA
Dallas
1 year ago
I think we practiced a question like this where we had to consider the resource group and region. I feel like Vnet1 and Vnet4 might be the right answer, but I can't recall clearly.
DO
Dorthy
1 year ago
I remember something about Azure firewalls needing to be in the same region as the virtual networks, but I'm not sure if that limits us to just Vnet1.
KA
Katy
1 year ago
I’m a bit confused about Vnet3 since it’s in a different region. I think it can’t be included, but I’m not entirely sure how that affects the options.
MA
Malcolm
1 year ago
I think the key point here is that the anonymization technique has to be robust enough to truly protect the data, even if other security measures fail. So I'm going to go with A - keeping the key separate from the data seems like the most critical step.
LA
Lavonda
1 year ago
Hmm, I'm torn between A and D. A layout container sounds flexible, but the text component seems more straightforward. Need to think this through carefully.
OT
otwb2pX
3 years ago
A. "Are there any firewall resource group restrictions?
Yes. The firewall, VNet, and the public IP address all must be in the same resource group"
From