Question

You manage a subnet containing 30 virtual machines that have no public IP addresses. The VMs must initiate outbound connections to a third-party SaaS API on the internet, and the provider requires that all requests originate from a single, predictable public IP address. You need a solution that provides reliable, scalable outbound connectivity without exposing the VMs to inbound internet traffic. What should you configure?

Accepted Answer

Associate a NAT gateway with a static Standard public IP address to the subnet

Answer

Assign a static Basic public IP address to each of the 30 VMs

Answer

Create an inbound NSG rule that allows traffic from the SaaS API's IP range

Answer

Deploy an Azure Bastion host in the subnet's virtual network