Correct Answer: They are stateful: if an inbound flow is allowed, outbound response is also allowed
Network Security Groups (NSGs) are stateful; if you define a security rule that allows inbound traffic, the corresponding outbound response traffic is automatically allowed regardl...
Correct Answer
They are stateful: if an inbound flow is allowed, outbound response is also allowed
Why This Answer Is Correct
Network Security Groups (NSGs) are stateful; if you define a security rule that allows inbound traffic, the corresponding outbound response traffic is automatically allowed regardless of outbound security rules.
This question evaluates your knowledge of Network Security Groups (NSG) — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Network Security Groups (NSG) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?
How are inbound and outbound rules evaluated in a Network Security Group (NSG)?
If a Network Security Group (NSG) is applied to both a Subnet and a Network Interface (NIC), which rule takes precedence for INBOUND traffic?
What does the default NSG rule 'AllowVnetInBound' (Priority 65000) allow?
An administrator wants to group multiple VMs that perform a similar function (e.g., 'WebServers') into a single entity to simplify NSG rules. What should they use?