AZ-900 · Question #86
This question requires that you evaluate the underlined text to determine if it is correct. After you create a virtual machine, you need to modify the network security group (NSG) to allow connections
The correct answer is A. No change is needed. To allow incoming connections on a specific TCP port to an Azure virtual machine, you must modify its associated Network Security Group (NSG) rules.
Question
Options
- ANo change is needed
- Bvirtual network gateway
- Cvirtual network
- Droute table
How the community answered
(43 responses)- A88% (38)
- B2% (1)
- C2% (1)
- D7% (3)
Why each option
To allow incoming connections on a specific TCP port to an Azure virtual machine, you must modify its associated Network Security Group (NSG) rules.
Network Security Groups (NSGs) are used to filter network traffic to and from Azure resources in an Azure Virtual Network. Modifying the NSG to add an inbound security rule for TCP port 8080 is the correct and primary method to allow connections to the virtual machine on that port.
A virtual network gateway is used for connecting Azure virtual networks to on-premises networks or other virtual networks, not for controlling traffic to a specific VM's port.
A virtual network provides the private IP address space and connectivity for VMs, but it doesn't directly filter traffic at the port level; NSGs handle this.
A route table defines how network traffic is routed within an Azure virtual network or to external destinations, but it doesn't filter traffic based on ports.
Concept tested: Network Security Group (NSG) rules
Source: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
Community Discussion
No community discussion yet for this question.