Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question
An administrator assigns a network security group (NSG) to a subnet. The NSG contains several inbound security rules with different priority numbers. When an incoming packet reaches the subnet, how does Azure determine which single rule from the NSG is applied to the traffic?
It combines the actions of every rule that matches the packet and applies them in sequence.
It evaluates rules starting with the lowest priority number and applies the first rule that matches the packet.
It evaluates all rules and enforces whichever rule is the most restrictive for the packet.
It evaluates rules starting with the highest priority number and applies the first rule that matches the packet.
Azure evaluates NSG security rules in ascending order of their priority number (where 100 is evaluated before 200, and so on). As soon as the first rule that matches the packet's characteristics is found, Azure stops processing further rules and enforces the action (allow or deny) defined in that rule. Rules with higher priority numbers are evaluated later and are ignored if an earlier rule already matched the traffic. Therefore, lower priority numbers have precedence. The other options are incorrect because Azure does not start with the highest priority number, does not aggregate multiple rules, and does not apply the most restrictive action after reviewing all rules.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a Network Security Group (NSG) in Azure?
Open an interactive chat with Bash
How does priority numbering work in NSG security rules?
Open an interactive chat with Bash
What happens if no rule matches the incoming packet in an NSG?
Open an interactive chat with Bash
Microsoft Security, Compliance, and Identity Fundamentals SC-900
Describe the capabilities of Microsoft security solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .