Microsoft Azure Administrator Associate AZ-104 Practice Question
Your company's Azure environment includes several virtual machines that support different application workloads within the same virtual network. You need to manage network security by grouping virtual machines based on their application roles to simplify the management of inbound and outbound traffic rules. What is the best way to achieve this goal?
Use application security groups to group the virtual machines and apply network security group rules to these groups.
Place each application workload in a separate subnet and associate a network security group with each subnet.
Implement Azure Firewall to control traffic to the virtual machines.
Assign the same network security group to all virtual machines.
Application Security Groups (ASGs) allow you to group virtual machines based on their application roles, enabling you to apply network security group (NSG) rules to these groups rather than individual IP addresses or subnets. This approach simplifies the management of network security by providing a scalable method to control traffic flow for different workloads. Assigning the same NSG to all VMs does not provide the necessary granularity for different applications. Placing workloads in separate subnets with individual NSGs increases complexity and reduces flexibility. Implementing Azure Firewall is unnecessary for controlling traffic within a virtual network and adds unnecessary cost and complexity.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Application Security Groups (ASGs) in Azure?
Open an interactive chat with Bash
How do NSGs and ASGs work together in Azure?
Open an interactive chat with Bash
Why is using ASGs more efficient than managing NSGs by IP or subnet?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Configure and manage virtual networking
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .