You have an Azure subscription that contains the following resources:
• A virtual network named Vnet1
• Two subnets named subnet1 and AzureFirewallSubnet
• A public Azure Firewall named FW1
• A route table named RT1 that is associated to Subnet1
• A rule routing of 0.0.0.0/0 to FW1 in RT1
After deploying 10 servers that run Windows Server to Subnet1, you discover that none of the virtual machines were activated.
You need to ensure that the virtual machines can be activated.
What should you do?
In this scenario, the virtual machines running Windows Server need to communicate with the Azure Key Management Service (KMS) for activation. The KMS is accessed over the internet, so ensuring that your virtual machines can reach KMS is crucial. To allow this, the most appropriate action is to create an outbound service tag rule for Azure Cloud on FW1. This will enable your virtual machines to connect to the necessary Azure services, including KMS, for activation. So, the correct answer is B. On FW1, create an outbound service tag rule for Azure Cloud.
You can also use an internet route, not just the cloud. So the correct answer can be either A or B.
Related question:topic 3 ,question 31.
looks like either A or B will work
The answer is KMS