Exam AZ-720 topic 5 question 23 discussion

Actual exam question from Microsoft's AZ-720

Question #: 23
Topic #: 5

A company has a pay-as-you-go subscription named Sub1.

The company has a virtual machine (VM) named VM1 in a subnet named Subnet1.

You create the following network security group (NSG) named NSG1 and associate it with Subnet1.

You observe that an application on VM1 is unable to send email to recipients outside the company.

You need to resolve the issue.

What should you do?

A. Configure the protocol for the NSG1 rule with a priority of 1000 to TCP.
B. Configure the source and destination ports for the NSG1 rule with a priority of 1000 to 587.
C. Migrate Sub1 to a cloud service provider subscription.
D. Remove the NSG1 rule with a priority of 2000.
E. Assign NSG1 to the network interface on VM1.

Show Suggested Answer

Suggested Answer: E 🗳️

by terawatt at July 21, 2023, 3:33 p.m.

Comments

Submit Cancel

terawatt

1 year, 11 months ago

Selected Answer: B

The issue seems to be related to how Azure's Network Security Group (NSG) is evaluating the rules. Here's a bit of context: The default standard email protocol (SMTP) uses port 25 for email communication. However, many Internet Service Providers (ISPs) and cloud services, including Azure, block outbound SMTP traffic over port 25 to prevent spam. Given the situation, the problem could be that the email traffic is being sent over port 25, which might be blocked. Hence, it's not an issue with the priority of the rules, the protocol, or the application of the NSG itself. The issue is likely related to the port being used for the email traffic. Azure recommends using port 587 for secure email transmission or SMTP relay. Therefore, the correct answer should be: B. Configure the source and destination ports for the NSG1 rule with a priority of 1000 to 587. This change should allow the email application on VM1 to send emails successfully to external recipients.

upvoted 1 times

...