StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Network design

Practice question 343 of 400 · easy

An NSG has a matching deny at priority 100 and a matching allow at priority 200. What happens to a new flow?

Choose the single best answer.

  1. A.The more permissive action always wins regardless of priority
  2. B.The deny matches first because lower priority numbers are evaluated first
  3. C.Both rules are merged because they match the same packet
  4. D.The allow wins because a larger number means earlier evaluation
Show the answer and explanation

✓ Correct answer

  • The deny matches first because lower priority numbers are evaluated first

NSGs evaluate lower-numbered priorities first and apply the first match. Higher numbers are later, allow does not universally override deny, and matching rules are not merged. Source guide: PDF page(s) 58-59.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.