Exam AZ-101 topic 3 question 31 discussion

I tested first question (Before you create a backend pool ...). I had 2 VMs (VM1 and VM2), both had privateIP as dynamic and publicIP was dynamic and basic SKU. Both are in the same VNet. I created standard public load balancer. When I wanted to create backend pool, I was unable to list any VMs after selecting my VNet. 1) I changed private IP adress of VM1 to static (in IPConfiguration of NIC assigned to the VM1) and nothing changed. 2) I removed public IP address of VM2 (dissociated it in detail of public IP) and now VM2 is visible to select in pool creation. Therefore I think correct answear is "Remove the public IP address from VM1"

The keyword was "Standard" :) This is the message you can see when you create a Load Balancer with Standard SKU: Standard Load Balancer is secure by default. This means Network Security Groups (NSGs) are used to explicitly permit and whitelist allowed traffic. If you do not have an NSG on a subnet or NIC of your virtual machine resource, traffic is not allowed to reach this resource. Please configure an NSG to ensure communication if needed. For outbound communication, an explicit outbound rule is needed.

qwiklabs-gcp-04-1fbd35622c19 So, if we can't have public IP in this scenario, and we must have a NSG on the VM's NIC, answer should be: Question 1 - Remove the public IP (The question says BEFORE you can connect) If you have a public IP, you can't list your VM on backend pool creation Question 2 - Create and assign a NSG to VM (The question says BEFORE you create the backend pool) "Standard Load Balancer is secure by default. This means Network Security Groups (NSGs) are used to explicitly permit and whitelist allowed traffic. If you do not have an NSG on a subnet or NIC of your virtual machine resource, traffic is not allowed to reach this resource. Please configure an NSG to ensure communication if needed."

1. "Change the private IP address of VM1 to static" 2. "Create and configure an NSG" Explanation in question #8 here: https://www.examtopics.com/exams/microsoft/az-103/view/13/

I don't understand why these answers are selected. Does anyone have a link to an explanation? It seems like you can create a backend pool without adding a VM to it, so the answer with NSG added to VM seems not correct. I just created a Load balancer and added a backend to it. Then I added a VM which already had a NIC public IP (static) and did not have NSG. There was no errors and it all succeeded.

1. Create and Assign an NSG to VM1 (Correct) 2. Create and configure an NSG (Correct)