nerdexam
Microsoft

AZ-900 · Question #256

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might h

The correct answer is B. Yes. Network Security Groups (NSGs) can effectively filter traffic between two subnets by defining rules based on TCP/IP protocol, source/destination IP addresses, and port numbers, thus meeting the specified requirements.

Submitted by jaden.t· Mar 5, 2026Describe Azure Architecture and Services

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company has deployed Azure. There are two subnets and you are required to filter traffic between them. Filtering should be based on three things: TCP/IP Protocol in use Source IP/address and port number Destination IP address and port number. Solution: As a solution, you suggest network Security Group to be deployed and configured as the traffic filter. Does this meet the goal?

Options

  • ANo
  • BYes

How the community answered

(60 responses)
  • A
    20% (12)
  • B
    80% (48)

Why each option

Network Security Groups (NSGs) can effectively filter traffic between two subnets by defining rules based on TCP/IP protocol, source/destination IP addresses, and port numbers, thus meeting the specified requirements.

ANo
BYesCorrect

Network Security Groups (NSGs) are used to filter network traffic to and from Azure resources in an Azure virtual network. NSG rules allow or deny traffic based on source/destination IP addresses (CIDR ranges), ports, and protocols (TCP, UDP, ICMP, Any), making them perfectly capable of controlling traffic flow between subnets.

Concept tested: Network Security Group (NSG) capabilities for subnet traffic filtering

Source: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-900 Practice