A subnet has NAT Gateway attached and a 0.0.0.0/0 UDR with a firewall virtual-appliance next hop. The external API sees the firewall path's egress address. What explains this?

Choose the single best answer.

A.NAT Gateway automatically overrides every UDR but the API resolves stale DNS
B.Private subnets forbid all explicitly configured internet egress
C.The selected UDR steers traffic to the firewall; NAT Gateway attachment does not override the route
D.A NAT association automatically deletes previously configured firewall UDRs

Show the answer and explanation

✓ Correct answer

The selected UDR steers traffic to the firewall; NAT Gateway attachment does not override the route

The selected route directs traffic to the firewall; NAT attachment neither overrides nor automatically removes that UDR. Stale DNS does not make NAT replace the route, and private subnets can use supported explicit egress. Source guide: PDF page(s) 55-57.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.