AZ-303 Exam - Question 176

Question

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You create a resource lock, and then you assign the lock to the subscription.

Does this meet the goal?

Examice · Accepted Answer

A resource lock in Azure is designed to prevent accidental deletion or modification of resources, not to enforce specific security rules or configurations such as blocking a specific TCP port. Therefore, creating a resource lock will not achieve the goal of automatically blocking TCP port 8080 between the virtual networks. The correct approach would involve using an Azure Policy that enforces the desired network security group rules.

nbaset · Answer

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

1) Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.Does this meet the goal? No

2) Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal? No

3) Solution: You create a resource lock, and then you assign the lock to the subscription.
Does this meet the goal? No

4) Solution: You configure a custom policy definition, and then you assign the policy to the subscription.
Does this meet the goal? Yes

Kraviecc · Answer

Correct

AAPaul · Answer

I had this question on the exam that i took on July 14th 2021

SaurabhSahu27 · Answer

Thanks nbaset for the complete set!

syu31svc · Answer

Resource lock is used to avoid accidental deletion of Azure resources so answer is No

AZ-303 Exam - Question 176

Discussion