AZ-500: Microsoft Azure Security Technologies

By Microsoft · Question Mode

QuestionQ8

Secure networking

HOTSPOT -

You have an Azure subscription named Sub1.

You create a virtual network containing one subnet. You provision the virtual machines on that subnet as shown in the following table.

Question Image

No network security groups (NSGs) have been provisioned yet. You need to implement network security that meets these requirements:

  • Allow traffic to VM4 only from VM3.
  • Allow Internet traffic only to VM1 and VM2.
  • Minimize the number of NSGs and network security rules.

How many NSGs and network security rules should you create?

Select
NSGs:
Network security rules:
Explanation

One NSG attached to the subnet can use application security groups in its rules. Create an allow rule from AppGroup3 to AppGroup4, then a lower-priority deny rule from the virtual network to AppGroup4 so that the default AllowVNetInBound rule does not permit other VNet sources. A third rule allows Internet traffic to AppGroup12, which contains VM1 and VM2. The default inbound deny rule blocks Internet access to VM3 and VM4.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!