Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has a virtual network defined in Azure. The network contains one subnet. On the subnet, the following virtual machines have been provisioned.
| Name | Network Interface | Application Security Group assignment | IP address |
| whizlabvm1 | NIC1 | whizlabappgrp1 | 10.1.0.10 |
| whizlabvm2 | NIC2 | whizlabappgrp1 | 10.1.0.12 |
| whizlabvm3 | NIC3 | whizlabappgrp2 | 10.1.0.50 |
| whizlabvm4 | NIC4 | whizlabappgrp3 | 10.1.0.54 |
Currently, there are no network security groups. Network security groups now need to be implemented with the following requirements-
- Allow traffic to whizlabvm3 from whizlabvm4
- Allow traffic from the Internet to whizlabvm1 and whizlabvm2 only
- Minimize the number of network security groups and network security rules
What is the minimum number of network security groups required?
A. 1
B. 2
C. 3
D. 4
Answer – A
All VM are in the same subnet with different NIC.
As soon as we deploy any default or custom NSG, it adds the default rule which can not be either deleted or modified, to communicate within all resources in the same VNet.
Question is discussing about following 3 requirement-
- Allow traffic to whizlabvm3 from whizlabvm4
- Allow traffic from the Internet to whizlabvm1 and whizlabvm2 only
- Minimize the number of network security groups and network security rules
But the final question is, of course, for point No. 3.
We can create an NSG and deploy multiple rules to control traffic, inbound and outbound either or both.
So finally No. of minimum NSG = 1
Also, we can create multiple Rules withing a single NSG.
For more information on virtual network security, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
Comments are closed, but trackbacks and pingbacks are open.