Implement and Manage Network Security Groups AZ-700 Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   Which Azure CLI command associates a network interface with an application security group?

   • Aaz network vnet subnet update
   • Baz network nic asg add
   • Caz network asg create
   • Daz network nsg rule update
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   You have a VM with two network interfaces (NICs). The VM is in a subnet that has an NSG associated. You need to apply a more restrictive NSG to only one of the NICs, while the other NIC should continue to use the subnet NSG. What should you do?

   • ACreate a new subnet and move the VM to it, then associate the new NSG to that subnet.
   • BRemove the subnet NSG and associate the new NSG to both NICs.
   • CAssociate a different NSG to the specific NIC that requires the more restrictive rules.
   • DUse application security groups to differentiate the NICs.
   Reveal Solution Discussion Select an answer first
3. 28application · medium

   You have an NSG applied to a subnet that hosts critical application servers. You need to capture detailed information about the traffic flows that the NSG allows or denies, including the source and destination IPs, ports, and the action taken. You also need to be able to query this data for analysis. What should you implement?

   • AUse Azure Monitor metrics for the NSG to track packet counts.
   • BEnable Traffic Analytics and view the data in the Azure portal.
   • CEnable NSG diagnostic logs and send them to a storage account.
   • DEnable virtual network flow logs for the NSG and send the logs to a Log Analytics workspace.
   Reveal Solution Discussion Select an answer first