AZ-700 · Question #317
You have two Azure virtual networks named VNet1 and VNet2 that are peered with each other. VNet1 hosts 10 virtual machines that contain web servers. VNet2 hosts five virtual machines that contain…
The correct answer is B. 2. To implement the security requirements using Application Security Groups (ASGs), a minimum of two ASGs are needed: one for the web servers and one for the database servers.
Question
You have two Azure virtual networks named VNet1 and VNet2 that are peered with each other. VNet1 hosts 10 virtual machines that contain web servers. VNet2 hosts five virtual machines that contain database servers. You need to configure a security solution that meets the following requirements:
- Ensures that the database servers can accept connections only from
the web servers
- Ensures that the web servers can initiate connections only to the
database servers
- Ensures that all network security groups (NSGs) are associated only
with subnets
- Use application security groups to implement the solution
What is the minimum number of application security groups required?
Options
- A1
- B2
- C4
- D8
How the community answered
(29 responses)- A7% (2)
- B79% (23)
- C10% (3)
- D3% (1)
Why each option
To implement the security requirements using Application Security Groups (ASGs), a minimum of two ASGs are needed: one for the web servers and one for the database servers.
One ASG would not be sufficient to define distinct security rules for two separate groups of virtual machines (web servers and database servers) that have different communication requirements.
One Application Security Group (ASG) is required for the web servers to group them, and another ASG is required for the database servers. These two distinct ASGs allow for defining granular Network Security Group (NSG) rules that specify communication only between the web server ASG and the database server ASG, satisfying both inbound and outbound requirements efficiently.
Four ASGs are more than the minimum required. The solution only needs to differentiate between two types of server roles (web and database) for security grouping.
Eight ASGs are significantly more than the minimum required. Two ASGs are sufficient to categorize the web and database servers and apply the specified communication restrictions.
Concept tested: Azure Network Security Groups and Application Security Groups
Source: https://learn.microsoft.com/en-us/azure/virtual-network/application-security-groups
Community Discussion
No community discussion yet for this question.