Exam AZ-900 All Questions

View all questions & answers for the AZ-900 exam

Exam AZ-900 topic 1 question 218 discussion

Actual exam question from Microsoft's AZ-900

Question #: 218
Topic #: 1

Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.
What should you include in the recommendation?

A. network security groups (NSGs)
B. Azure Service Bus
C. a local network gateway
D. a route filter

Show Suggested Answer

Suggested Answer: A 🗳️

by success101 at Dec. 31, 2019, 8:56 a.m.

Comments

Submit Cancel

sheddy

Highly Voted 4 years, 4 months ago

Keyword is "several". You will want to use a group for multiple VMs traffic rules.

upvoted 31 times

Rainman

3 years, 11 months ago

but i was expecting to see either "A fire wall" or "multiple NSGs" .

upvoted 5 times

LexusNX425

3 years, 10 months ago

You could have multiple VMs in a single NSG

upvoted 6 times

...

success101

Highly Voted 4 years, 5 months ago

A is correct

upvoted 27 times

shashu07

3 years, 6 months ago

Keyword is "web servers and several database servers to Azure" ie internal traffic to VMs, so answer is NSG. We can consider Firewall, its point to external traffic to VMs

upvoted 15 times

...

kaushu400

4 years, 4 months ago

oh really?

upvoted 14 times

nexter

4 years, 4 months ago

oh yeah

upvoted 36 times

getazusername

3 years, 7 months ago

ouh yeah!

upvoted 1 times

...

ElPile

Most Recent 9 months ago

Selected Answer: A

A. network security groups (NSGs)

upvoted 2 times

...

LS1030

1 year, 2 months ago

Selected Answer: A

Network Security Group has the functionality to allow and/or deny access to an azure resource.

upvoted 1 times

...

AzureCloud07

1 year, 6 months ago

Network Security Group (NSG) is like internal firewall inside your Virtual Network right before your resources - A (right answer)

upvoted 2 times

...

TonyghostR05

1 year, 8 months ago

NSG, other choice is not work

upvoted 1 times

...

Leito82

1 year, 10 months ago

Key word is "limit". A NSG does just that.

upvoted 2 times

...

Krissy90

2 years, 2 months ago

NSG Must be something like NetworkPolices for Kubernetes.

upvoted 1 times

...

fercho

2 years, 9 months ago

Appeared on 05 Sep 2021

upvoted 3 times

...

taoj

3 years ago

Got it on 01 Jun 2021

upvoted 3 times

...

Gerardo1971

3 years, 1 month ago

Correct answer

upvoted 1 times

...

Siwe

3 years, 1 month ago

Definately NSG

upvoted 1 times

...

shalinics1211111

3 years, 1 month ago

am not having the access to see all the questions, can these 100 questions sufficient

upvoted 1 times

...

sdas2021

3 years, 2 months ago

A is correct. This came in the test yesterday.

upvoted 4 times

...

panal

3 years, 3 months ago

Answer is B.

upvoted 2 times

FabiZamora93

3 years, 1 month ago

You comment on all questions but never justify...

upvoted 7 times

...

Andyk19

3 years ago

good luck

upvoted 4 times

...

serget12

3 years, 4 months ago

I would think an Application Gateway would work best

upvoted 2 times

...

AcetheTest

3 years, 7 months ago

I took connection "type" to mean protocol, which is an option within network security groups. the word "limit" might throw someone off, but ultimately limiting the protocols just means picking and choosing which ones are okay. "For each rule, you can specify source and destination, port, and protocol." https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

upvoted 1 times

...

Load full discussion...