AZ-104 Certification Practice Question #215

Question

You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table.

Each virtual machine uses a static IP address.
You need to create network security groups (NSGs) to meet following requirements:
✑ Allow web requests from the internet to VM3, VM4, VM5, and VM6.
✑ Allow all connections between VM1 and VM2.
✑ Allow Remote Desktop connections to VM1.
✑ Prevent all other network traffic to VNET1.
What is the minimum number of NSGs you should create?

Accepted Answer

You can associate a single Network Security Group (NSG) with multiple subnets (Subnet1, Subnet2, and Subnet3). Since each virtual machine uses a static IP address, you can create specific rules within this single NSG to:
1. Allow web requests from the internet targeting the static IPs of VM3, VM4, VM5, and VM6.
2. Allow Remote Desktop connections targeting the static IP of VM1.
3. Traffic between VM1 and VM2 is allowed by default because they are on the same virtual network subnet (and VNET-internal traffic is allowed by default under the default rules).
4. All other traffic is blocked by the default `DenyAllInbound` rule of the NSG. 
Therefore, only 1 NSG is required to meet all goals.

More AZ-104 practice questions