You have an Azure subscription that contains the resources in the following table. Name Type Details VNet1 Virtual network Not applicable Subnet1 Subnet Hosted on VNet1 VM1 Virtual machine On Subnet1 VM2 Virtual machine On Subnet1 VM1 and VM2 are deployed from the same template and host line-of-business applications. You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.) Inbound security rules PRORITY NAME PORT PROTOCOL SOURCE DESTINATION ACTION 100 Port_80 80 TCP Internet Any 🔴 Deny 65000 AllowVnetinBound Any Any VirtualNetwork VirtualNetwork 🟢 Allow 65001 Allow AzureLoadBalancerlnBound Any Any AzureLoadBalancer Any 🟢 Allow 65500 DenyAllInBound Any Any Any Any 🔴 Deny Outbound security rules PRIORITY NAME PORT PROTOCOL SOURCE DESTINATION ACTION 100 A DenyWebSites 80 TCP Any Internet 🔴 Deny 65000 AllowVnetOutBound Any Any VirtualNetwork VirtualNetwork 🟢 Allow 65001 AllowInternetOutBound Any Any Any Internet 🟢 Allow 65500 DenyAllOutBound Any Any Any Any 🔴 Deny You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80. What should you do?

Correct Answer is : Associate the NSG to Subnet1.

Disassociate the NSG from a network interface

Change the Port_80 inbound security rule.

Change the DenyWebSites outbound security rule.

Microsoft Azure Administrator Associate AZ 104 Practice test 5

Question : 14 of 50

Marks: +1, -0

You have an Azure subscription that contains the resources in the following table.

Name	Type	Details
VNet1	Virtual network	Not applicable
Subnet1	Subnet	Hosted on VNet1
VM1	Virtual machine	On Subnet1
VM2	Virtual machine	On Subnet1

VM1 and VM2 are deployed from the same template and host line-of-business applications.
You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.)

Inbound security rules

PRORITY	NAME	PORT	PROTOCOL	SOURCE	DESTINATION	ACTION
100	Port_80	80	TCP	Internet	Any	🔴 Deny
65000	AllowVnetinBound	Any	Any	VirtualNetwork	VirtualNetwork	🟢 Allow
65001	Allow AzureLoadBalancerlnBound	Any	Any	AzureLoadBalancer	Any	🟢 Allow
65500	DenyAllInBound	Any	Any	Any	Any	🔴 Deny

Outbound security rules

PRIORITY	NAME	PORT	PROTOCOL	SOURCE	DESTINATION	ACTION
100	A DenyWebSites	80	TCP	Any	Internet	🔴 Deny
65000	AllowVnetOutBound	Any	Any	VirtualNetwork	VirtualNetwork	🟢 Allow
65001	AllowInternetOutBound	Any	Any	Any	Internet	🟢 Allow
65500	DenyAllOutBound	Any	Any	Any	Any	🔴 Deny

You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80.
What should you do?

Disassociate the NSG from a network interface
Change the Port_80 inbound security rule.
Associate the NSG to Subnet1.
Change the DenyWebSites outbound security rule.

Validate

Go to Question:

Prev Question

Next Question