AZ-104: Microsoft Azure Administrator Full Course - Scope of NSGs

The video tutorial explains the structure of a virtual network (VNet) with subnets and resources like virtual machines and databases. It introduces Network Security Groups (NSGs), their linkage to subnets or network cards, and the importance of managing them effectively. Best practices for applying NSGs at the subnet level are discussed, along with the evaluation process of NSGs at both subnet and network card levels. An example is provided to illustrate NSG rules for incoming and outgoing traffic on port #80.

What is the primary function of a subnet within a virtual network?

• To host resources like virtual machines and databases

• To provide internet connectivity

• To store backup data

• To manage user access

Why is it recommended to link a network security group at the subnet level?

• To simplify tracking and management of security rules

• To enhance data storage capacity

• To improve user interface design

• To increase the speed of the network

What challenge might arise when linking NSGs to individual network cards?

• Increased network latency

• Difficulty in tracking and maintaining security rules

• Higher costs for network resources

• Limited access to virtual machines

In the evaluation process of NSGs, which level is assessed first for incoming traffic?

• Database level

• Virtual machine level

• Subnet level

• Network card level

What must be present at both the subnet and network card levels for traffic to be admitted?

• A redirect rule

• An allow rule

• A log rule

• A deny rule