Outbound packets traverse one stateful firewall path, while replies bypass it. The application intermittently fails despite permissive NSG rules. What is the best investigation?

Choose the single best answer.

A.Switch to a higher VM size as a guaranteed route correction
B.Inspect effective routes and packet flow to establish a coherent symmetric inspection path
C.Add broader NSG allow rules until asymmetric routing no longer matters
D.Increase DNS TTL to share firewall session state

Show the answer and explanation

✓ Correct answer

Inspect effective routes and packet flow to establish a coherent symmetric inspection path

Stateful inspection can fail when only one direction follows the expected session path. Effective routing and packet evidence identify the inconsistency; permissive filtering does not fix asymmetry, DNS TTL does not synchronize firewall state, and VM size does not deterministically correct routes. Source guide: PDF page(s) 57.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.