Exam AZ-900 topic 1 question 218 discussion

Actual exam question from Microsoft's AZ-900

Question #: 218
Topic #: 1

Your company plans to deploy several web servers and several database servers to Azure.
You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.
What should you include in the recommendation?

A. network security groups (NSGs)
B. Azure Service Bus
C. a local network gateway
D. a route filter

Show Suggested Answer

Suggested Answer: A 🗳️

by success101 at Dec. 31, 2019, 8:56 a.m.

Comments

Submit Cancel

sheddy

Highly Voted 4 years, 6 months ago

Keyword is "several". You will want to use a group for multiple VMs traffic rules.

upvoted 31 times

Rainman

4 years, 1 month ago

but i was expecting to see either "A fire wall" or "multiple NSGs" .

upvoted 5 times

LexusNX425

4 years ago

You could have multiple VMs in a single NSG

upvoted 6 times

...

success101

Highly Voted 4 years, 7 months ago

A is correct

upvoted 27 times

shashu07

3 years, 8 months ago

Keyword is "web servers and several database servers to Azure" ie internal traffic to VMs, so answer is NSG. We can consider Firewall, its point to external traffic to VMs

upvoted 15 times

...

kaushu400

4 years, 6 months ago

oh really?

upvoted 14 times

nexter

4 years, 6 months ago

oh yeah

upvoted 36 times

getazusername

3 years, 9 months ago

ouh yeah!

upvoted 1 times

...

117975e

Most Recent 4 weeks, 1 day ago

Selected Answer: A

To limit the types of connections from web servers to database servers in Azure, the ideal recommendation is to use Network Security Groups (NSGs). NSGs act as virtual firewalls, allowing you to control inbound and outbound traffic to your Azure resources. You can define rules within NSGs to specify which protocols, ports, and source IP addresses are allowed for communication between your web and database servers.

upvoted 1 times

...