Exam AZ-700 topic 4 question 42 discussion

Actual exam question from Microsoft's AZ-700

Question #: 42
Topic #: 4

SIMULATION
-

Username and password
-

Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below.

To enter your password, place your cursor in the Enter password box and click on the password below.

Azure Username: [email protected]

Azure Password: xxxxxxxxxx
-

If the Azure portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab.

The following information is for technical support purposes only:

Lab Instance: 12345678
-

You need to block all outbound internet traffic for HTTP and HTTPS that originates from subnet1-1. All other traffic must be allowed.

To complete this task, sign in to the Azure portal.

Show Suggested Answer

Suggested Answer:

by Korro at March 4, 2024, 5:51 p.m.

Comments

Submit Cancel

Korro

Highly Voted 1 year, 3 months ago

wouldn't a NSG outbound rule associated with subnet1-1 be sufficient?

upvoted 6 times

LieJ0n

1 year, 1 month ago

Agreed, I think additional information is missing from this question. so either an NSG on subnet 1, or if you need to use an existing firewall (policy), we need to create a network rule (opposed to an application rule)

upvoted 1 times

...

bobothewiseman

Most Recent 4 months, 3 weeks ago

NSG for the win! If you need centralized and advanced traffic control or require FQDN-based filtering, Azure Firewall is the better choice. However, if your requirements are simple, NSGs can be sufficient.

upvoted 1 times

...

AlainChk

12 months ago

NSG on subnet1-1 that denies outbound on port 80 and 443 should be enough in my view. For other subnets, outbound to http/https in allowed even with NSG default rules.

upvoted 2 times

...