Microsoft Exam AZ-104 Topic 5 Question 107 Discussion

Actual exam question for Microsoft's AZ-104 exam

Question #: 107
Topic #: 5

You have a subnet named Subnet1 that contains Azure virtual machines. A network security group (NSG) named NSG1 is associated to Subnet1, NSG1 on default rules.

You need to create a rule in NSG1 to prevent the hosts on Subnet1 from connecting to the azure portal. The hosts must be able to connect to other ...

To what should you set Destination in the rule?

AService tag

BIP addresses

CApplication security group

DAny

Show Suggested Answer

Suggested Answer: A

by Brande at Sep 18, 2024, 04:34 AM

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Georgeanna

5 months ago

D) Any - Really? That's like saying 'Destination: Everything'. Can't be the right answer.

upvoted 0 times

Edelmira

4 months ago

C) Application security group

upvoted 0 times

...

Wenona

4 months ago

B) IP addresses

upvoted 0 times

...

Xochitl

4 months ago

A) Service tag

upvoted 0 times

...

Alline

5 months ago

C) Application security group - Hmm, I don't think that's the right choice here. We're trying to block the Azure portal, not a specific app.

upvoted 0 times

...

Rima

5 months ago

This is a classic case of 'when in doubt, choose the service tag'.

upvoted 0 times

Gilma

3 months ago

I'm not sure about that, I think it might be application security group.

upvoted 0 times

...

Karrie

3 months ago

C) Application security group

upvoted 0 times

...

Noel

3 months ago

I agree, service tag seems like the safest choice here.

upvoted 0 times

...

Coletta

3 months ago

A) Service tag

upvoted 0 times

...

Noble

3 months ago

I'm not sure, but I think it might be IP addresses.

upvoted 0 times

...

Ludivina

4 months ago

B) IP addresses

upvoted 0 times

...

Keneth

4 months ago

I think you're right, service tag is usually the best option.

upvoted 0 times

...

Leota

4 months ago

A) Service tag

upvoted 0 times

...

Willard

5 months ago

A) Service tag - Makes sense to me. The Azure portal is a service, so a service tag would be the way to go.

upvoted 0 times

Eric

4 months ago

D) Any

upvoted 0 times

...

Melita

4 months ago

C) Application security group

upvoted 0 times

...

Emogene

4 months ago

C) Application security group

upvoted 0 times

...

Emeline

5 months ago

B) IP addresses

upvoted 0 times

...

Shonda

5 months ago

B) IP addresses

upvoted 0 times

...

Tamesha

5 months ago

A) Service tag

upvoted 0 times

...

Galen

5 months ago

A) Service tag

upvoted 0 times

...

Mendy

5 months ago

That makes sense too. I guess it depends on how we want to manage the destination for the rule.

upvoted 0 times

...

Margery

5 months ago

I disagree, I believe the answer is A) Service tag because it allows us to define the destination based on predefined tags.

upvoted 0 times

...

Mendy

6 months ago

I think the answer is B) IP addresses because we need to specify the destination for the rule.

upvoted 0 times

...