Challenge: lock down a web subnet with NSGs

تحدي: اقفل Web subnet بالـ NSGs

The web tier in vnet-app (subnet web , VM vm-web01 ) is wide open inside the VNet and can browse the internet freely. Security wants a least-privilege rule set. The management jump box lives in subnet mgmt ( 10.60.9.0/24 ).

The 3 tasks you will do

• Requirement 1 — Inbound least privilegeالمتطلب 1 — أقل صلاحيات في الـ Inbound
• Requirement 2 — Outbound: storage onlyالمتطلب 2 — الـ Outbound: الـ Storage بس
• Requirement 3 — Prove it with IP flow verifyالمتطلب 3 — اثبت ده بـ IP flow verify

The lesson it belongs to

• Configure network security groups