NSE 7 – Public Cloud Security 6.4 — Question 13

Which two statements about Microsoft Azure network security groups are true? (Choose two.)

Answer options

• A. Network security groups can be applied to subnets and virtual network interfaces.
• B. Network security groups can be applied to subnets only.
• C. Network security groups are stateless inbound and outbound rules used for traffic filtering.
• D. Network security groups are a stateful inbound and outbound rules used for traffic filtering.

Correct answer: A, D

Explanation

Option A is correct because network security groups can indeed be associated with both subnets and virtual network interfaces. Option D is also correct as network security groups utilize stateful rules, allowing them to track the state of connections. Options B and C are incorrect since they misrepresent the application scope and nature of network security groups.