Microsoft Azure Security Engineer Associate AZ-500 Practice Question

In Virtual WAN you can centrally force spoke virtual networks to send specific traffic types through the security provider (Azure Firewall) hosted in a secured virtual hub by applying a routing intent. A routing intent lets you set routing policies - Internet, Private, or both - on the hub. When you configure a routing intent with the Internet policy, Virtual WAN automatically programs the necessary system routes, so outbound Internet traffic from any connected spoke is forwarded to the hub firewall. No manual user-defined routes are required in the spokes. Other options, such as enabling branch-to-branch traffic or associating spoke connections with a custom route table, do not on their own redirect Internet traffic to the firewall.