Microsoft
AZ-104 · Question #131
You have an Azure subscription that contains 10 virtual machines, a key vault named Vault 1, and a network security group (NSG) named NSG1. All the resources are deployed to the East US Azure region.
Sign in or unlock AZ-104 to reveal the answer and full explanation for question #131. The question stem and answer options stay visible for context.
Submitted by salim_om· Mar 4, 2026Configure and manage virtual networking
Question
You have an Azure subscription that contains 10 virtual machines, a key vault named Vault 1, and a network security group (NSG) named NSG1. All the resources are deployed to the East US Azure region. The virtual machines are protected by using NSG1. NSG1 is configured to block all outbound traffic to the internet. You need to ensure that the virtual machines can access Vault1. The solution must use the principle of least privilege and minimize administrative effort. What should you configure as the destination of the outbound security rule for NSG1 ?
Options
- Aan application security group
- Ban IP address range
- Ca service tag
Unlock AZ-104 to see the answer
You've previewed enough free AZ-104 questions. Unlock AZ-104 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.