AZ-104 Certification Practice Question #232

Question

You have an Azure virtual machine named VM1.
The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.)

You deploy a web server on VM1, and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.
You need to ensure that users can connect to the website from the Internet.
What should you do?

Accepted Answer

Security rules in Azure Network Security Groups (NSGs) are processed in order of priority, where lower numbers have higher precedence. Once a rule matches the packet's attributes, evaluation stops. In the exhibit, Rule2 denies HTTPS (port 443) traffic with a priority of 500. Any new rule designed to allow port 443 must have a priority value less than 500 to be evaluated before Rule2. Creating a new rule with priority 501 (Option D) will be evaluated after Rule2 and therefore fail. Modifying Rule5 (which spans destination ports 50 to 5000, including 443) to have an Action of "Allow" and a priority of 401 ensures that inbound HTTPS traffic is matched and allowed before Rule2 is ever evaluated, successfully meeting the goal.

More AZ-104 practice questions