exam questions

Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam

Exam AZ-103 topic 4 question 36 discussion

Actual exam question from Microsoft's AZ-103
Question #: 36
Topic #: 4
[All AZ-103 Questions]

SIMULATION -
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g, copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
You may now click next to proceed to the lab.
Use the following login credentials as needed:

Azure Username: XXXXXXX -

Azure Password: XXXXXXX -
The following information is for technical support purposes only:

Lab Instance: 9172796 -

You need to allow RDP connections over TCP port 3389 to VM1 from the Internet. The solution must prevent connections from the Internet over all other TCP ports.
What should you do from the Azure portal?

Show Suggested Answer Hide Answer
Suggested Answer: See solution below.
Step 1: Create a new network security group
Step 2: Select your new network security group.

Step 3: Select Inbound security rules. Under Add inbound security rule, enter the following
Destination: Select Network security group, and then select the security group you created previously.

Destination port ranges: 3389 -

Protocol: Select TCP -

References:
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
samizdat
Highly Voted 5 years, 2 months ago
don't forget to associate the newly created NSG to VM's NIC or VM's subnet.
upvoted 15 times
asdfgh1234567
5 years, 1 month ago
subnet would be preferred but both are correct
upvoted 1 times
...
...
Abu_Mjaid
Highly Voted 4 years, 11 months ago
Straight forward solution: https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-nsg-problem#solution
upvoted 5 times
...
nfett
Most Recent 5 years ago
by default the inbound NSG will disallow all other access, but in case it doesnt than we might need to look at that traffic. i think it just depends on what the NSG we see in the exam. if its a brand new one than no need.
upvoted 4 times
...
nfett
5 years ago
inbound interface NSG should be modified to create the required rule.
upvoted 1 times
...
Robinsonasir
5 years, 1 month ago
If you are modifying an existing NSG Rule assigned to , it is already associated to VM/subnet
upvoted 1 times
S458855
5 years ago
i agreee. juz modify it will do.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...