You have a single subnet with 50 VMs: 25 Web servers and 25 Database servers. You want to create NSG rules that allow traffic from the Web servers to the Database servers without specifying 25 individual IP addresses or breaking them into multiple subnets. What feature should you use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Application Security Groups (ASG)

Application Security Groups (ASGs) allow you to group virtual machines and define network security policies based on those groups. You can create an ASG named 'WebServers' and anot...

๐Ÿ“‹Part of Microsoft Certified: Azure Network Engineer Associate (AZ-700) ยท Azure Certification Practice
Real Exam ScenarioNetwork Security Groups

You have a single subnet with 50 VMs: 25 Web servers and 25 Database servers. You want to create NSG rules that allow traffic from the Web servers to the Database servers without specifying 25 individual IP addresses or breaking them into multiple subnets. What feature should you use?

โœ“ Correct Answer & ExplanationNetwork Security Groups

Correct Answer

Application Security Groups (ASG)

Why This Answer Is Correct

Application Security Groups (ASGs) allow you to group virtual machines and define network security policies based on those groups. You can create an ASG named 'WebServers' and another named 'DBServers', assign the VMs to them, and then use the ASGs as the source and destination in your NSG rules instead of hardcoding IP addresses.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Network Security Groups โ€” a core concept tested in Microsoft Certified: Azure Network Engineer Associate (AZ-700). Understanding Network Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.