StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Network design

Practice question 345 of 400 · medium

Security wants NSG rules to refer to web-tier and application-tier NIC roles instead of individual IP lists. Which feature is appropriate?

Choose the single best answer.

  1. A.A broad VirtualNetwork tag with no web/application role distinction
  2. B.Subnet names treated as identities automatically used as NSG source groups
  3. C.Application security groups
  4. D.Service tags treated as arbitrary customer-defined NIC-role groups
Show the answer and explanation

✓ Correct answer

  • Application security groups

ASGs group selected NICs by role. Service tags are maintained prefix sets rather than arbitrary NIC membership, VirtualNetwork is broader than this role distinction, and subnet names do not automatically create application security groups. Source guide: PDF page(s) 59.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.