exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 6 question 1 discussion

Actual exam question from Microsoft's AZ-303
Question #: 1
Topic #: 6
[All AZ-303 Questions]

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer Computer1 that runs Windows
10. Computer1 is connected to the Internet.
You add a network interface named Interface1 to VM1 as shown in the exhibit. (Click the Exhibit tab.)

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.
You need to establish a Remote Desktop connection to VM1.
What should you do first?

  • A. Attach a network interface
  • B. Start VM1
  • C. Delete the DenyAllOutBound outbound port rule
  • D. Delete the DenyAllInBound inbound port rule
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
The exclamation icon next to the inbound port rule for port 3389, which is used for Remote Desktop, indicates an underlying problem. Restart the VM to correct any underlying issues the VM itself is having.
Incorrect Answers:
A: The network interface has already been added to VM.
C: The DenyAllOutBound outbound port rule will not affect inbound Remote Desktop connectivity.
D: An inbound rule for port 3389, which is used for Remote Desktop has been added and has a higher priority than the DenyAllInBound inbound port rule.
Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Processing stops once traffic matches a rule. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
widurr
Highly Voted 4 years, 5 months ago
Answer is correct, but explanation is not. When VM has a dynamic, public IP address and is deallocated (stopped), IP is returned to the pool and instead of seeing the IP in 'networking', you see the publicIP name instead.
upvoted 32 times
...
exam67
Highly Voted 4 years, 4 months ago
Also agree that answer is correct, but explanation is wrong. In particular the exclamation mark does not indicate any problem. In my experience this indicate a security risk to a common port being opened to the public. It is not an indication that VM need to be started
upvoted 17 times
...
tteesstt
Most Recent 3 years, 9 months ago
You cannot delate DenyAllOutBound or DenyAllInBound rules. They are Azure default rules.
upvoted 2 times
...
syu31svc
3 years, 9 months ago
If it's not turned on you can't connect to it can you? B is the answer
upvoted 1 times
...
rdemontis
3 years, 10 months ago
Correct answer but not explanation
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...