[&] Which of the following statements are true? (select two)
- NSGs do not work with vendor firewall appliances
- Vendor supplied firewalls should be provisioned directly from the Azure marketplace -- Correct
- When implementing a vendor supplied firewall it is recommended that you start with a standard VM image and install the firewall software manually
- Vendor firewall appliances require custom routing rules on the subnets protected by the firewall -- Correct

[&] Which of the following is not essential when configuring a virtual machine in Azure that is protected by a vendor supplied firewall appliance?
- Use a complex, randomized password for administrative accounts
- Enable strict firewall rules on the OS level firewall -- Correct
- Limit administrative access to the virtual machine through Azure RBAC
- Disable all services or daemons that are not required for the virtual machine's workload