nerdexam
Microsoft

AZ-700 · Question #201

You have a network security group (NSG) named NSG1 associated to each subnet. When a new subnet is created in Vnet1 an automated process creates an additional network monitoring virtual machine in…

The correct answer is A. an application security group. Create an ASG and assign to each monitoring vm. Then in the NSG1, create an allow rule to allow the IP 131.107.1.15 to the ASG. https://learn.microsoft.com/en-us/azure/virtual-network/application-security-groups

Submitted by fatima_kr· Apr 18, 2026

Question

You have a network security group (NSG) named NSG1 associated to each subnet. When a new subnet is created in Vnet1 an automated process creates an additional network monitoring virtual machine in the subnet and links the subnet to NSG1. You need to create an inbound security rule in NSG1 that will allow connections to the network monitoring virtual machines from an IP address of 131.107.1.15. The solution must meet the following requirements:

  • Ensure that only the monitoring virtual machines receive a connection

from 131.1071.15.

  • Minimize changes to NSG1 when a new subnet is created.

What should you use as the destination in the inbound security rule?

Options

  • Aan application security group
  • Ba service tag
  • Ca virtual network
  • Dan IP address

How the community answered

(18 responses)
  • A
    78% (14)
  • B
    6% (1)
  • C
    11% (2)
  • D
    6% (1)

Explanation

Create an ASG and assign to each monitoring vm. Then in the NSG1, create an allow rule to allow the IP 131.107.1.15 to the ASG. https://learn.microsoft.com/en-us/azure/virtual-network/application-security-groups

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-700 Practice