nerdexam
Microsoft

AZ-900 · Question #209

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? Each co

The correct answer is B. Modify an Azure firewall. D. Modify a network security group (NGS). A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network to a network interface assigned to a virtual machine. You can use multiple network secu

Submitted by layla.eg· Mar 5, 2026Describe Azure Architecture and Services

Question

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? Each correct answer presents a complete solution.

Options

  • AModify a DDoS protection plan.
  • BModify an Azure firewall.
  • CModify an Azure Traffic Manager profile.
  • DModify a network security group (NGS)

How the community answered

(27 responses)
  • A
    19% (5)
  • B
    70% (19)
  • C
    11% (3)

Explanation

A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. In this question, we need to add a rule to the network security group to allow the connection to the virtual machine on port 80 (HTTP). https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Community Discussion

No community discussion yet for this question.

Full AZ-900 Practice