A company is planning on deploying a web server and database server as shown in the architecture diagram below. You have to ensure that traffic restrictions are in place so that the database server ca

The correct answer is A. Network security groups (NSGs). You should use network security groups to allow or deny traffic within subnets. Option B is incorrect since this is used as a messaging system. Option C is incorrect since this is used to represent a VPN device in a Site-to-Site VPN Option D is incorrect since this is normally us

Submitted by jakub_pl· Mar 5, 2026Describe Azure Architecture and Services

Question

A company is planning on deploying a web server and database server as shown in the architecture diagram below. You have to ensure that traffic restrictions are in place so that the database server can only communicate with the web server. Which of the following would you recommend for implementing these restrictions?

Exhibits

Options

ANetwork security groups (NSGs)
BAzure Service Bus
CA local network gateway
DA Virtual Private Gateway

How the community answered

(33 responses)

A
73% (24)
B
15% (5)
C
3% (1)
D
9% (3)

Explanation

You should use network security groups to allow or deny traffic within subnets. Option B is incorrect since this is used as a messaging system. Option C is incorrect since this is used to represent a VPN device in a Site-to-Site VPN Option D is incorrect since this is normally used to connect networks together via the Internet. https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice