You have an on-premises server named Server1 that runs Windows Server. You have an Azure subscription. The subscription contains a virtual machine named VM1 that runs Windows Server. The…

Question

Options

• AModify the priority of Rule2 and add an outbound port rule.
• BModify the priority of Rule1 and add an inbound port rule.
• CModify the priority of Rule2 and add an inbound port rule.
• DModify the priority of Rule1 and add an outbound port rule.

• A
  11% (5)
• B
  7% (3)
• C
  2% (1)
• D
  80% (35)

Explanation

Installing Windows Admin Center on an Azure VM via the Azure portal uses an Azure VM Extension. The extension agent on the VM must make outbound HTTPS calls (port 443) to download the WAC installer package from Microsoft. If an existing outbound deny rule (Rule1) is blocking this traffic at a higher priority than any allow rule, the installation will fail. The fix requires two changes: (1) modify the priority of Rule1 so that it no longer blocks the required outbound traffic (i.e., lower its priority or raise it above the relevant allow rule), and (2) add an explicit outbound port rule permitting port 443 egress for the download. An inbound rule change alone (options B and C) is insufficient because the blocking issue is outbound - the extension cannot reach the internet to fetch the installer. Option A modifies Rule2's priority, which is not the rule causing the outbound blockage.

No community discussion yet for this question.