AZ-700 Azure Routing 1 — Questions and Answers
Question 1: What is the correct priority order when multiple routes exist for the same address prefix in an Azure subnet?
- System routes > BGP routes > User Defined Routes
- User Defined Routes > BGP routes > System routes (Correct answer)
- BGP routes > User Defined Routes > System routes
- System routes > User Defined Routes > BGP routes
Correct answer: User Defined Routes > BGP routes > System routes
User Defined Routes take the highest priority, followed by BGP-learned routes, and finally system routes when routes share the same prefix.
Question 2: You need to prevent all internet-bound traffic from a specific Azure subnet. Which UDR configuration achieves this?
- Create a route for 0.0.0.0/0 with next hop type 'None' (Correct answer)
- Create a route for 0.0.0.0/0 with next hop type 'VirtualAppliance'
- Delete the default system route for internet traffic
- Create an NSG rule blocking all outbound traffic on port 443
Correct answer: Create a route for 0.0.0.0/0 with next hop type 'None'
A UDR with destination 0.0.0.0/0 and next hop 'None' creates a black hole route that silently drops all internet-bound traffic.
Question 3: A subnet route table has a custom route for 10.0.0.0/16 pointing to a virtual appliance, and a system route for 10.0.1.0/24 (a subnet within 10.0.0.0/16) pointing to VnetLocal. Traffic destined for 10.0.1.5 will use which route?
- The /16 custom route to the virtual appliance
- The /24 system route to VnetLocal (Correct answer)
- Traffic is dropped because conflicting routes exist
- The route with the lowest administrative distance
Correct answer: The /24 system route to VnetLocal
Azure uses longest prefix match, so the more specific /24 route wins over the /16 route regardless of route source.
Question 4: Which next hop type in a User Defined Route directs traffic to a network virtual appliance (NVA) running in Azure?
- Internet
- VnetLocal
- VirtualAppliance (Correct answer)
- VirtualNetworkGateway
Correct answer: VirtualAppliance
The 'VirtualAppliance' next hop type routes traffic to a specified private IP address, typically an NVA such as a firewall or router VM.
Question 5: When gateway route propagation is disabled on a subnet's route table, what is the effect?
- All routing is disabled for the subnet
- Routes learned by the VPN or ExpressRoute gateway are not added to the subnet's effective routes (Correct answer)
- The subnet can no longer communicate with other subnets in the same VNet
- BGP is disabled on all gateways connected to the VNet
Correct answer: Routes learned by the VPN or ExpressRoute gateway are not added to the subnet's effective routes
Disabling gateway route propagation prevents the VPN or ExpressRoute gateway from automatically injecting its learned on-premises routes into the subnet's route table.
Question 6: What is the purpose of viewing 'Effective Routes' for a virtual machine's network interface in Azure?
- To see only the BGP routes advertised to on-premises routers
- To display the merged routing table combining system, UDR, and BGP routes that the NIC actually uses (Correct answer)
- To show which routes are currently experiencing packet loss
- To display routes validated by Azure's internal routing engine
Correct answer: To display the merged routing table combining system, UDR, and BGP routes that the NIC actually uses
Effective routes show the combined result of all route sources—system routes, UDRs, and BGP-learned routes—applied to a specific NIC, making it the primary troubleshooting tool for routing issues.
Question 7: What is the default system route behavior for traffic in an Azure VNet that does not match any more specific route?
- Traffic is sent to the nearest Azure datacenter for inspection
- Traffic is dropped because no matching route exists (Correct answer)
- Traffic is forwarded to the VNet gateway for routing decisions
- Traffic is broadcast to all subnets in the VNet
Correct answer: Traffic is dropped because no matching route exists
When traffic matches the default system route with next hop 'None' (no route), Azure drops the traffic silently.
AZ-700 Azure Routing 1
What is the correct priority order when multiple routes exist for the same address prefix in an Azure subnet?