You have an Azure subscription that contains multiple network security groups (NSGs), multiple virtual machines, and an Azure Bastion host named bastion1. Several NSGs contain rules that allow…

Question

Exhibit

Options

• AAzure Virtual Network Manager security admin rules
• BAzure Virtual Network Manager connectivity configurations
• CAzure Firewall application rules
• DAzure Firewall network rules

• A
  80% (36)
• B
  7% (3)
• C
  2% (1)
• D
  11% (5)

Explanation

How security admin rules and network security groups (NSGs) are evaluated Security admin rules and network security groups (NSGs) can be used to enforce network security policies in Azure. However, they have different scopes and priorities.# Security admin rules are intended to be used by network admins of a central governance team, thereby delegating NSG rules to individual application or service teams to further specify security as needed. Security admin rules have a higher priority than NSGs and are evaluated before NSG NSGs, on the other hand, are used to filter network traffic to and from individual subnets or network interfaces. They're intended to be used by individual application or service teams to further specify security as needed. NSGs have a lower priority than security admin rules and are evaluated after security admin rules. Security admin rules are currently applied at the virtual network level, whereas network security groups can be associated at the subnet and NIC level. This table shows these differences and similarities: https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins

No community discussion yet for this question.