Networking with Windows Server 2016 — Question 96

You implement Software Defined Networking (SDN) by using the Network Controller server role.
You have a virtual network named VNET1 that contains servers used by developers.
You need to ensure that only devices from the 192.168.0.0/24 subnet can access the virtual machine in VNET1.
What should you configure?

Answer options

• A. a network security group (NSG)
• B. role-based access control
• C. a universal security group
• D. Dynamic Access Control

Correct answer: A

Explanation

The correct answer is A, as a network security group (NSG) is specifically designed to control inbound and outbound traffic based on rules defined for IP addresses. The other options, such as role-based access control and universal security groups, do not directly manage network traffic in the same way an NSG does, while Dynamic Access Control is focused on managing permissions rather than network access.