AZ-104 Certification Practice Question #254

Question

You have a virtual network named VNET1 that contains the subnets shown in the following table:

You have Azure virtual machines that have the network configurations shown in the following table:

For NSG1, you create the inbound security rule shown in the following table:

For NSG2, you create the inbound security rule shown in the following table:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **VM2 to VM1:** Subnet1 has NSG1 associated which allows TCP port 1433 inbound from Subnet2 (Priority 101). However, VM1's NIC has NSG2 associated which explicitly blocks inbound TCP port 1433 from VM2 (10.10.2.5) to VM1 (10.10.1.5) (Priority 125). Because the traffic is blocked at the NIC level (NSG2), VM2 cannot connect to VM1.
2. **VM1 to VM2:** VM1's outbound traffic is permitted by the default `AllowVnetOutbound` rules in NSG2 and NSG1. VM2 resides in Subnet2 which has no subnet-level NSG, and VM2's NIC has no NSG. Therefore, the connection is allowed.
3. **VM2 to VM3:** Both virtual machines reside in Subnet2. Subnet2 has no NSG associated, and neither VM2 nor VM3 has a NIC-level NSG. Therefore, they can communicate on any port by default within the VNet.

More AZ-104 practice questions