You have an Azure subscription that contains the resources in the following table.

Name Type Details
VNet1 Virtual network Not applicable
Subnet1 Subnet Hosted on VNet1
VM1 Virtual machine On Subnet1
VM2 Virtual machine On Subnet1
VM1 and VM2 are deployed from the same template and host line-of-business applications.
You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.)
Inbound security rules

PRORITY NAME PORT PROTOCOL SOURCE DESTINATION ACTION
100 Port_80 80 TCP Internet Any 🔴 Deny
65000 AllowVnetinBound Any Any VirtualNetwork VirtualNetwork 🟢 Allow
65001 Allow AzureLoadBalancerlnBound Any Any AzureLoadBalancer Any 🟢 Allow
65500 DenyAllInBound Any Any Any Any 🔴 Deny

Outbound security rules
PRIORITY NAME PORT PROTOCOL SOURCE DESTINATION ACTION
100 A DenyWebSites 80 TCP Any Internet 🔴 Deny
65000 AllowVnetOutBound Any Any VirtualNetwork VirtualNetwork 🟢 Allow
65001 AllowInternetOutBound Any Any Any Internet 🟢 Allow
65500 DenyAllOutBound Any Any Any Any 🔴 Deny

You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80.
What should you do?

Question

PRORITY	NAME	PORT	PROTOCOL	SOURCE	DESTINATION	ACTION
100	Port_80	80	TCP	Internet	Any	🔴 Deny
65000	AllowVnetinBound	Any	Any	VirtualNetwork	VirtualNetwork	🟢 Allow
65001	Allow AzureLoadBalancerlnBound	Any	Any	AzureLoadBalancer	Any	🟢 Allow
65500	DenyAllInBound	Any	Any	Any	Any	🔴 Deny

PRIORITY	NAME	PORT	PROTOCOL	SOURCE	DESTINATION	ACTION
100	A DenyWebSites	80	TCP	Any	Internet	🔴 Deny
65000	AllowVnetOutBound	Any	Any	VirtualNetwork	VirtualNetwork	🟢 Allow
65001	AllowInternetOutBound	Any	Any	Any	Internet	🟢 Allow
65500	DenyAllOutBound	Any	Any	Any	Any	🔴 Deny

Examsnet · Accepted Answer

Correct Answer is :  Associate the NSG to Subnet1.

Microsoft Azure Administrator Associate AZ 104 Practice test 5