Microsoft · AZ-700
Azure Firewall and Firewall Manager
AZ-700 · Lesson 19 of 20 · 2:32:39
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-700 exam (Microsoft Certified: Azure Network Engineer Associate). In this lesson: the Basic, Standard, and Premium SKUs of Azure Firewall, hub designs with AzureFirewallSubnet and user-defined routes, SNAT, forced tunneling, the DNS proxy, DNAT, network, and application rules and their processing order, firewall policies with inheritance, Azure Firewall Manager, and secured virtual hubs. Includes three original practice questions.
Preview the topics
- Contoso must inspect the content of outbound HTTPS traffic for malware, and block requests by their full URL path. Which SKU fits?
- A group at priority 100 has an application rule allowing a partner’s site, and a group at priority 200 has a network rule denying all outbound HTTPS. What happens to HTTPS traffic to that site?
- Contoso wants a base set of rules on firewalls in three regions, while each local team adds its own rules without weakening the base. What should it use?