SIMULATION You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources. To complete this task…

Submitted by mateo_ar· Mar 6, 2026Configure and manage virtual networking - specifically implementing network security controls using Network Security Groups (NSGs) to restrict inbound internet traffic to specific ports on Azure subnets.

Question

SIMULATION You need to ensure that connections from the Internet to VNET1\subnet0 are allowed only over TCP port 7777. The solution must use only currently deployed resources. To complete this task, sign in to the Azure portal. Answer: You need to configure the Network Security Group that is associated with subnet0. 1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET1. Alternatively, browse to Virtual Networks in the left navigation pane. 2. In the properties of VNET1, click on Subnets. This will display the subnets in VNET1 and the Network Security Group associated to each subnet. Note the name of the Network Security Group associated to Subnet0. 3. Type Network Security Groups into the search box and select the Network Security Group associated with Subnet0. 4. In the properties of the Network Security Group, click on Inbound Security Rules. 5. Click the Add button to add a new rule. 6. In the Source field, select Service Tag. 7. In the Source Service Tag field, select Internet. 8. Leave the Source port ranges and Destination field as the default values (* and All). 9. In the Destination port ranges field, enter 7777. 10. Change the Protocol to TCP. 11. Leave the Action option as Allow. 12. Change the Priority to 100. 13. Change the Name from the default Port_8080 to something more descriptive such as Allow_TCP_7777_from_Internet. The name cannot contain spaces. 14. Click the Add button to save the new rule.

Explanation

The correct approach is to configure an inbound security rule on the Network Security Group (NSG) associated with subnet0, specifying the source as 'Internet', destination port as '7777', protocol as 'TCP', and action as 'Allow', while ensuring any broader allow rules have a higher priority number (lower priority) or adding a deny-all rule. NSGs are the native Azure mechanism for filtering network traffic at the subnet or NIC level, and since the question requires using only currently deployed resources, creating a new NSG is not allowed - only the existing one must be modified. This solution correctly restricts inbound Internet traffic to only TCP port 7777 without provisioning any new resources.

Topics

#Network Security Groups#Azure Virtual Networks#Inbound Security Rules#Network Access Control

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice