Microsoft Exam AZ-700 Topic 8 Question 54 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 54
Topic #: 8

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1

You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.

You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.

What should you add to NSG1?

Aan outbound rule that has a priority 100 and blocks all internet traffic

Ban outbound rule that has a priority of 4096 and blocks all internet traffic

Can inbound rule that has a priority of 4096 and blocks all internet traffic

Dan inbound rule that has a priority of 100 and blocks all internet traffic

Show Suggested Answer

Suggested Answer: C

by Kristofer at Mar 04, 2024, 03:31 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Claribel

7 months ago

That makes sense. It ensures AppGw1 only load balances traffic from VNet1.

upvoted 0 times

...

Kris

7 months ago

I believe we should use a priority of 4096 to block all internet traffic.

upvoted 0 times

...

Marguerita

7 months ago

I agree. But which priority should we use?

upvoted 0 times

...

Rene

7 months ago

I think we should add an inbound rule to NSG1.

upvoted 0 times

...

You guys are overthinking this. The answer is clearly B - an outbound rule with a priority of 4096 to block all internet traffic. That way, any outbound traffic from the application gateway is restricted to just the VNet1 subnet. Easy peasy!

upvoted 0 times

...

Arthur

8 months ago

Hmm, I'm not sure about option C. Wouldn't that also block any legitimate traffic trying to access the application gateway from outside VNet1? I'm thinking option D might be the better choice - an inbound rule with a priority of 100 to block all internet traffic. That way, we're still allowing traffic from VNet1 to access the gateway.

upvoted 0 times

...

Allene

8 months ago

I agree, an outbound rule blocking all internet traffic would be overkill. We need a more targeted approach. I'm leaning towards option C - an inbound rule with a priority of 4096 to block all internet traffic. That way, we're specifically targeting the inbound traffic to the subnet, which aligns with the requirement.

upvoted 0 times

...

8 months ago

C) an inbound rule that has a priority of 4096 and blocks all internet traffic

upvoted 0 times

...

Microsoft Exam AZ-700 Topic 8 Question 54 Discussion

Contribute your Thoughts:

Claribel

Kris

Marguerita

Rene

Buddy

Arthur

Allene

Ria

Eladia

Nickie

Queenie

Ashley

Bernardo

Lisandra

Hyun