Private Azure VMs must call a third-party internet API from predictable public source addresses. Unsolicited inbound access is not required. Which service best fits?

Choose the single best answer.

A.Azure Bastion as an application egress translator
B.Azure NAT Gateway associated with their subnet
C.An internal Load Balancer without an explicit egress method
D.Implicit default outbound access as a guaranteed fixed public source address

Show the answer and explanation

✓ Correct answer

Azure NAT Gateway associated with their subnet

NAT supplies controlled public egress addresses. An internal load balancer alone does not establish explicit egress, Bastion serves administrative access, and implicit default addresses are not guaranteed predictable customer-controlled sources. Source guide: PDF page(s) 55.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.