Practice Test 2 | AZ 104 | Dumps | Mock Test

You are planning the move of whizlabs-app to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to whizlabs-app. What should you recommend?

1. Create an outgoing security rule for port 443 from the Internet. Associate the Network Security Group to all the subnets
2. Create an incoming security rule for port 443 from the Internet. Associate the Network Security Group to all the subnets
3. Create an incoming security rule for port 443 from the Internet. Associate the Network Security Group to the subnet that contains the web server
4. Create an outgoing security rule for port 443 from the Internet. Associate the Network Security Group to the subnet that contains the web servers

Answer – C

If you have a Network Security group, change the Incoming rules to allow port 443. This is so that users from the Internet can access to the web server on the secure port 443.

Options A and D are incorrect since users need to connect to the web server. That means the incoming rule needs to be modified and not the outgoing rules.

Option B is incorrect since associating the Network Security Group with Multiple subnets will affect all the other application tiers.

For more information on Network Security Groups, please go to the below URL-

https:/ docs.microsoft.com/en-us/azure/virtual-network/security-overview