What should you do first?

You need to meet the technical requirements for VNetwork1.

What should you do first?
A . Create a new subnet on VNetwork1.
B . Remove the NSGs from Subnet11 and Subnet13.
C . Associate an NSG to Subnet12.
D . Configure DDoS protection for VNetwork1.

Answer: A

Explanation:

From scenario: Deploy Azure Firewall to VNetwork1 in Sub2.

Azure firewall needs a dedicated subnet named AzureFirewallSubnet.

References: https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal