Microsoft Azure Security Engineer Associate AZ-500 Practice Question

User-defined routes (UDRs) have higher precedence than routes learned through BGP. By creating a route table that contains a 0.0.0.0/0 entry with the next hop type set to Internet and associating that table with AppSubnet, you override the BGP-propagated default route only for that subnet. More-specific on-premises prefixes learned through BGP remain in the effective route set and are still used, so traffic destined for the on-premises network continues to flow through the VPN gateway. Setting the next hop to None would black-hole all internet traffic, disabling BGP propagation would also remove the on-premises routes, and deploying Azure Firewall does not by itself restore direct internet egress.