FCP – Zero Trust Cloud Security Administrator 7.4 — Question 24

What is a limitation of the Network Security Groups (NSGs) in Azure?

Answer options

• A. NSGs allow the filtering of inbound traffic only.
• B. NSGs are applied only to vNICs.
• C. NSGs operate at the application layer, limiting their effectiveness in the network layer.
• D. NSGs cannot be applied to individual virtual machines.

Correct answer: D

Explanation

The correct answer is D because NSGs are applied at the subnet or network interface level, not directly to individual virtual machines. Options A, B, and C are incorrect as NSGs do allow for filtering outbound traffic, can be applied to both vNICs and subnets, and operate at the network layer as well as the transport layer, not just the application layer.