StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 347 of 498 · medium

An NSG allow rule is removed during containment, but an established SSH session remains connected. Which two statements explain this behavior? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Higher numeric rule priorities are evaluated before lower numeric priorities
  2. B.Every existing flow is terminated immediately by any NSG rule change
  3. C.Return traffic requires a separate explicit inbound allow even for an established outbound flow
  4. D.Existing established connections can remain active after the allow rule is removed
  5. E.New connections are evaluated against the updated NSG rules
Show the answer and explanation

✓ Correct answers

  • Existing established connections can remain active after the allow rule is removed
  • New connections are evaluated against the updated NSG rules

NSGs are stateful, and rule changes apply to new connections rather than necessarily interrupting established flows. Return traffic for an allowed established flow does not need a separate explicit opposite-direction rule. Lower numeric priorities are evaluated first. Verify new connections and use suitable session termination when immediate containment is required.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.