Correct Answer: The Subnet NSG is evaluated first, then the NIC NSG
For inbound traffic, Azure first evaluates the subnet NSG. If allowed, it then evaluates the NIC NSG....
Correct Answer
The Subnet NSG is evaluated first, then the NIC NSG
Why This Answer Is Correct
For inbound traffic, Azure first evaluates the subnet NSG. If allowed, it then evaluates the NIC NSG.
This question evaluates your knowledge of Network Security Groups (NSG) — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Network Security Groups (NSG) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?
How are inbound and outbound rules evaluated in a Network Security Group (NSG)?
What does the default NSG rule 'AllowVnetInBound' (Priority 65000) allow?
An administrator wants to group multiple VMs that perform a similar function (e.g., 'WebServers') into a single entity to simplify NSG rules. What should they use?
Which tag can be used in an NSG rule to represent the IP address range of the Azure Load Balancer health probe?