AZ-800 Network Security Group Rules 5

Question 1

What is an Application Security Group (ASG) and how does it relate to NSG rules?

Accepted Answer

A logical grouping of VM NICs used as source/destination in NSG rules instead of IP addresses

Answer

ASGs group VM NICs logically, enabling NSG rules to reference the group name instead of IP addresses, simplifying management at scale.

Question 2

NSG flow logs are stored in which Azure service?

Accepted Answer

Azure Storage Account

Answer

NSG flow logs are written to an Azure Storage Account in JSON format, from where they can be consumed by tools like Traffic Analytics.

Question 3

After VNet peering is established, which service tag automatically includes the peered VNet address space in NSG rules?

Accepted Answer

VirtualNetwork

Answer

Once VNet peering is configured, the VirtualNetwork service tag expands to include the address spaces of all peered virtual networks.

Question 4

Which protocol option in an NSG rule covers TCP, UDP, ICMP, and all other IP protocols without creating separate rules?

Accepted Answer

Any

Answer

Setting the protocol field to 'Any' in an NSG rule matches TCP, UDP, ICMP, and all other IP protocols.

Question 5

You associate an NSG to a subnet. A new VM is added to the subnet. How does the NSG apply to the new VM?

Accepted Answer

The NSG automatically applies to the new VM because it is subnet-scoped

Answer

A subnet-associated NSG automatically applies to all resources, including newly created VMs, within that subnet without any additional configuration.

AZ-800 - Microsoft Azure Networking Solutions Practice Test