Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Network Engineer Associate · Microsoft
Hotspot Scenario
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
I initially thought the same, but: It's important to note that security rules in an NSG associated to a subnet can affect connectivity between VMs within it. By default, virtual machines in the same subnet can communicate based on a default NSG rule allowing intra-subnet traffic. If you add a rule to NSG1 that denies all inbound and outbound traffic, VM1 and VM2 won't be able to communicate with each other.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
as of august, 2025, there is no labs anymore
The best approach is: NSG Rule Configuration Property Value Priority 100 Name Deny_TCP_5585 Source Service Tag Source service tag VirtualNetwork Source Port Range * Destination IP range of subnet1-2 Destination Port Range 5585 Protocol TCP Action Deny
Intra-Subnet traffic It's important to note that security rules in an NSG associated to a subnet can affect connectivity between VMs within it. By default, virtual machines in the same subnet can communicate based on a default NSG rule allowing intra-subnet traffic. If you add a rule to NSG1 that denies all inbound and outbound traffic, VM1 and VM2 won't be able to communicate with each other. https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works