StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Virtual machines · Virtual machines | Manage Windows Server VMs in Azure

Practice question 168 of 506 · medium

A newly deployed VM in a private subnet created with an API released after March 31, 2026 can reach other private resources but cannot reach Windows Update. No explicit egress exists. What is the likely missing configuration?

Choose the single best answer.

  1. A.An explicit outbound connectivity method such as NAT Gateway
  2. B.A private DNS zone with the VM's name as the sole egress mechanism
  3. C.A broader inbound RDP rule as the Internet egress mechanism
  4. D.A second private NIC without a route or translation design
Show the answer and explanation

✓ Correct answer

  • An explicit outbound connectivity method such as NAT Gateway

The new private-subnet default requires explicit outbound connectivity to public endpoints. Private DNS can resolve names but cannot create egress. Another NIC without a routing/translation plan adds no Internet path. Inbound RDP permission is unrelated to the required outbound update flow.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.