AZ-104 Certification Practice Question #173

Question

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You install and configure a web server and a DNS server on VM1.
VM1 has the effective network security rules shown in the following exhibit:

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Network security group (NSG) rules are processed in priority order (lower numbers first). Rule 2 has a higher priority (100) than Rule 1 (200). Rule 2 blocks inbound traffic on ports 50–60 (which covers port 53 for DNS), meaning DNS requests from the internet are blocked. Port 80 (HTTP) does not match Rule 2, so it falls through to Rule 1 (allowing ports 50–500), meaning the web server is accessible. Consequently, in the initial state, internet users can connect to **the web server only**. If Rule 2 is deleted, the blocking rule is removed, and DNS traffic on port 53 falls through to Rule 1, allowing access to **both the DNS server and the web server**.

More AZ-104 practice questions