A subnet NSG allows a flow, but the NIC NSG denies the same applicable flow. What is the result?

Choose the single best answer.

A.The subnet allow overrides every NIC rule
B.Only the NAT Gateway public address determines permission
C.The NIC NSG is ignored whenever a subnet NSG exists
D.The flow is blocked because applicable rules at both scopes must permit it

Show the answer and explanation

✓ Correct answer

The flow is blocked because applicable rules at both scopes must permit it

Both applicable NSGs participate in filtering, so a deny at either scope can block the flow. Neither general subnet precedence nor automatic NIC omission applies, and egress translation does not override NSG permissions. Source guide: PDF page(s) 59.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.