StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Virtual machines · Virtual machines | Manage Windows Server VMs in Azure

Practice question 167 of 506 · medium

An inbound TCP 443 connection is allowed by the subnet NSG but denied by the NIC NSG. Windows has a working listener. What must change for this new flow?

Choose the single best answer.

  1. A.The applicable NIC NSG must also permit the required traffic
  2. B.The subnet allow automatically overrides the NIC deny
  3. C.Only the Windows DNS suffix needs updating
  4. D.An outbound allow for unrelated TCP 80 overrides inbound evaluation
Show the answer and explanation

✓ Correct answer

  • The applicable NIC NSG must also permit the required traffic

Both associated NSGs must allow the flow; the NIC deny still blocks it. One NSG's allow cannot override the other. DNS suffix does not repair an explicit IP/port deny, and unrelated outbound traffic does not authorize a new inbound flow.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.