nerdexam
MicrosoftMicrosoft

AZ-104 · Question #629

AZ-104 Question #629: Real Exam Question with Answer & Explanation

Sign in or unlock AZ-104 to reveal the answer and full explanation for question #629. The question stem and answer options stay visible for context.

Submitted by alyssa_d· Mar 4, 2026Configure and manage virtual networking

Question

You have two Azure virtual machines named VM1 and VM2 that run Windows Server. The virtual machines are in a subnet named Subnet1. Subnet1 is in a virtual network named VNet1. You need to prevent VM1 from accessing VM2 on port 3389. What should you do?

Options

  • ACreate a network security group (NSG) that has an outbound security rule to deny destination
  • BConfigure Azure Bastion in VNet1.
  • CCreate a network security group (NSG) that has an outbound security rule to deny source port
  • DCreate a network security group (NSG) that has an inbound security rule to deny source port

Unlock AZ-104 to see the answer

You've previewed enough free AZ-104 questions. Unlock AZ-104 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full AZ-104 PracticeBrowse All AZ-104 Questions