az-900 Practice Question 506
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
You plan to deploy several Azure virtual machines.\nYou need to control the ports that devices on the Internet can use to access the virtual machines.\nWhat should you use?\nA. a network security group (NSG)\nB. an Azure Active Directory (Azure AD) role\nC. an Azure Active Directory group\nD. an Azure key vault
Answer Options
A
a network security group (NSG)
B
an Azure Active Directory (Azure AD) role
C
an Azure Active Directory group
D
an Azure key vault
Correct Answer
A: a network security group (NSG)
Explanation
A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the\nvirtual network.\nYou can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security\ngroups within a virtual network to restrict traffic between resources such as virtual machines and subnets.\nYou can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group\ncontains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.