Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test

Answer –- A 

As per the case  study, both for whizlabvm1 and  whizlabvm5, following is applicable 

Each  vm has a   public IP  address 

Each VM has Internet Information Server role installed 

Firewalls on each VM allow ping and web request, 

whizlabvm5 is part of  subnetD,  The network security group whizlabnsg4 has been assigned to the subnet as shown on the figure below. 

If you look at the inbound security rules for the network security group, the first rule with a priority of 100 would allow all incoming traffic. So definitely, the traffic would flow into whizlabvm5.

We should remember that azure NSG’s are stateful. This means if a request is allowed, corresponding  response will be also allowed. 

In view of the above, it is clear, that,  ping request can be made from whizlabvm1 to whichlabvm5 (both Request and response) 

Hence, A is the right answer. 

For more information on virtual network security, one can visit the below URL-

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview