Exam NSE7_PBC-6.4 topic 1 question 12 discussion

Page 139 of the study guide

A and D are correct You can deploy resources from several Azure services into an Azure virtual network. For a complete list, see Services that can be deployed into a virtual network. You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose. https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

Ans - AD

You can create, view all, view details of, change, and delete a network security group. You can also associate or dissociate a network security group from a network interface or subnet. https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group The flow record allows a network security group to be stateful. https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Option A and D, from the official documentation, https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works, in the link from RueDizz it even reads at the beginning that it can be applied to interfaces and below it says as well that it can be applied to subnets.

Correct Answer: BD Explanation/Reference: Reference: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview