az-900 Practice Question 506
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?
A. a network security group (NSG)
B. an Azure Active Directory (Azure AD) role
C. an Azure Active Directory group
D. an Azure key vault
Answer Options
A
a network security group (NSG)
B
an Azure Active Directory (Azure AD) role
C
an Azure Active Directory group
D
an Azure key vault
Correct Answer
A: a network security group (NSG)
Explanation
A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the
virtual network.
You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security
groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.
You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group
contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.