Exam NSE7_PBC-6.4 topic 1 question 10 discussion

C is incorrect because this answer is limited to "IP Ranges", the scope of "Source or destination" is: Any, or an individual IP address, classless inter-domain routing (CIDR) block (10.0.0.0/24, for example), service tag, or application security group. https://learn.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

C is stating ranges, not multiple IP addresses. Azure allows this: "Source or destination: Any, or an individual IP address, classless inter-domain routing (CIDR) block (10.0.0.0/24, for example), service tag, or application security group [...] Fewer security rules are needed when you specify a range, a service tag, or application security group." As these three are all properties and not actions these are my favorites.

ADE is idd correct, you can't specify ranges for src/dst IPs

ADE are correct https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview C is false --> "You can't specify multiple IP addresses and IP address ranges in network security groups created through the classic deployment model. " AllowVNetInBound Priority Source Source ports Destination Destination ports Protocol Access 65000 VirtualNetwork 0-65535 VirtualNetwork 0-65535 Any Allow

ACD are correct as per https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

ADE is correct

ADE is correct. If You try to add a new security rule "Action", "Source port ranges" and "Destination port ranges" properties are configurable. There is no such property as "Sequence number".

I think the correct answer es CDE, all of them are properties. For me the key here is the word "properties". Action is not a property.

Under "Default security rules" we read source, destination, source port, destination port and access. However under "Security rules" we read action, port ranges and source and destination, and essentially Options A, C, D and E are valid are those parameters can be configured. I would mark A D and E and source/destination port are to be seen in the table, maybe old documentation. https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

The correct is: A, C, D As show in the link: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview