Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company has a virtual network defined in Azure. The network contains one subnet. On the subnet, the following virtual machines have been provisioned.
| Name | Network Interface | Application Security Group assignment | IP address |
| whizlabvm1 | NIC1 | whizlabappgrp1 | 10.1.0.10 |
| whizlabvm2 | NIC2 | whizlabappgrp1 | 10.1.0.12 |
| whizlabvm3 | NIC3 | whizlabappgrp2 | 10.1.0.50 |
| whizlabvm4 | NIC4 | whizlabappgrp3 | 10.1.0.54 |
Currently, there are no network security groups. Network security groups now need to be implemented with the following requirements-
- Allow traffic to whizlabvm3 from whizlabvm4
- Allow traffic from the Internet to whizlabvm1 and whizlabvm2 only
- Minimize the number of network security groups and network security rules
What is the minimum number of network security rules that need to be created?
A. 1
B. 2
C. 3
D. 4
Answer – A
Here all VMs are in the same subnet, and you know the following three default rules are automatically deployed by Microsoft which can neither deleted nor modified.
This means there is no control of the user on these rules. So ideally, without any adding rule, VM can communicate with each other inside a VNet whose member it is.
Hence No. of Rule added by the user is Zero. This fulfils our 1st requirement “Allow traffic to whizlabvm3 from whizlabvm4”
for 2nd requirement “Allow traffic from the Internet to whizlabvm1 and whizlabvm2 only” we need to add a rule in the same NSG.
Hence minimum No. of NSG: 1
Minimum No. of Rules in NSG: 1
For more information on virtual network security, one can visit the below URL-
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
Comments are closed, but trackbacks and pingbacks are open.