Practice question 40 of 180 · medium
Effective NSG rules permit a host's intended flow, but the connection fails. The team has not checked the destination's DNS answer or Windows Firewall. Which two investigations are directly relevant?
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Resolve the destination from the affected host
- Inspect the host's Windows Firewall rules and logs
Check the actual destination and the host's local filtering. Effective NSG results do not include every layer that can prevent a connection. Option explanations: A. Increase the total license count: Licenses do not diagnose DNS or packet filtering. B. Resolve the destination from the affected host: An incorrect or unreachable DNS result can break a flow despite an allowed NSG rule. C. Declare success because an NSG allow rule proves end-to-end application access: NSG permission is only one layer and does not prove resolution or host filtering. D. Inspect the host's Windows Firewall rules and logs: Windows Firewall is a separate enforcement layer not represented by effective NSG rules. Sources: Required FQDNs and endpoints for Azure Virtual Desktop — https://learn.microsoft.com/en-us/azure/virtual-desktop/required-fqdn-endpoint
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.