networkYes / No
Note: This question is part of a series that presents the same scenario. Each question has a unique solution. NSG1 is associated with Subnet1 and contains only the default rules. You need to prevent the VMs in Subnet1 from accessing the internet while keeping communication inside the virtual network. Solution: You delete the AllowInternetOutBound rule from NSG1. Does this meet the goal?
ملحوظة: السؤال ده جزء من سلسلة أسئلة ليها نفس السيناريو، وكل سؤال فيها ليه حل مختلف. الـ NSG1 مربوط بـ Subnet1 وفيه القواعد الافتراضية بس. محتاج تمنع الـ VMs اللي في Subnet1 إنها توصل للإنترنت، مع إن الاتصال جوه الـ Virtual network يفضل شغال. الحل: تمسح قاعدة AllowInternetOutBound من NSG1. هل ده بيحقق المطلوب؟
- AYes
- BNo
Why: Default security rules (such as AllowVnetOutBound and AllowInternetOutBound, priorities 65000+) cannot be deleted or modified. The proposed solution is impossible, so it does not meet the goal. The correct approach is to add a custom outbound rule that denies traffic to the Internet service tag with a priority between 100 and 4096 — it is evaluated before AllowInternetOutBound while AllowVnetOutBound still allows traffic inside the VNet.
Exam skills it covers
- Create and configure network security groups (NSGs) and application security groups