You plan to deploy several Azure virtual machines. You need to control the ports that devices on the internet can use to access the virtual machines. What should you use?

The correct answer is D. a network security group (NSG). A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multip

Submitted by thandi_sa· Mar 5, 2026Describe Azure Architecture and Services

Question

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the internet can use to access the virtual machines. What should you use?

Options

Aan Azure Active Directory (AzureAD) role
Ban Azure key vault
Can Azure Active Directory group
Da network security group (NSG)

How the community answered

(34 responses)

A
3% (1)
B
12% (4)
C
6% (2)
D
79% (27)

Explanation

A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets. You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice