You create NSG10 and NSG11 to meet the network security requirements

HOTSPOT

You create NSG10 and NSG11 to meet the network security requirements.

For each of the following statements, select Yes it the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Graphical user interface, text, application, email

Description automatically generated

Box 1: No

NSG10 which is attached to VM1’s subnet blocks RDP (port TCP 3389) to ‘Any’ which means the port is blocked to all destinations.

Box 2: Yes

NSG10 blocks ICMP from VNet4 (source 10.10.0.0/16) but it is not blocked from VM2’s subnet (VNet1/Subnet2).

Box 3: No

NSG11 blocks RDP (port TCP 3389) destined for ‘VirtualNetwork’. VirtualNetwork is a service tag and means the address space of the virtual network (VNet1) which in this case is 10.1.0.0/16. Therefore, RDP traffic from subnet2 to anywhere else in VNet1 is blocked.