Exam-Answer

Home / Microsoft / AZ-104 / Question 78

Prev Question
Next Question

Question 78

You have an Azure subscription that contains the virtual machines shown in the following table:

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default rules and the following custom incoming rule:

Priority: 100

Name: Rule1

Port: 3389

Protocol: TCP

Source: Any

Destination: Any

Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.

Choose all that apply:

Answers



A B C

Advertisement

Explanation

Default security rules

Azure creates the following default rules in each network security group that you create:

Inbound

AllowVNetInBound

ALLOWVNETINBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65000 VirtualNetwork 0-65535 VirtualNetwork 0-65535 Any Allow

AllowAzureLoadBalancerInBound

ALLOWAZURELOADBALANCERINBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65001 AzureLoadBalancer 0-65535 0.0.0.0/0 0-65535 Any Allow

DenyAllInbound

DENYALLINBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65500 0.0.0.0/0 0-65535 0.0.0.0/0 0-65535 Any Deny

Outbound

AllowVnetOutBound

ALLOWVNETOUTBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65000 VirtualNetwork 0-65535 VirtualNetwork 0-65535 Any Allow

AllowInternetOutBound

ALLOWINTERNETOUTBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65001 0.0.0.0/0 0-65535 Internet 0-65535 Any Allow

DenyAllOutBound

DENYALLOUTBOUND

Priority Source Source ports Destination Destination ports Protocol Access

65500 0.0.0.0/0 0-65535 0.0.0.0/0 0-65535 Any Deny

Comments

Load more
Prev Question
Next Question