What should you do?

You have an Azure subscription that contains the resources in the following table.

VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop. You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit button.)

You need to prevent users of VM1 and VM2 from accessing websites on the Internet.

What should you do?
A . Associate the NSG to Subnet1.
B . Disassociate the NSG from a network interface.
C . Change the DenyWebSites outbound security rule.
D . Change the Port_80 inbound security rule

View Answer

Answer: A

Explanation:

Outbound rule “DenyWebSites” is setup correctly to block outbound internet traffic over port 80. In the screenshot it states, "Associated with: 0 subnets, 0 NIC’s", so you need to associate the NSG to Subnet1.You can associate or dissociate a network security group from a NIC or Subnet.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group