Upgrading Your Skills to MCSA: Windows Server 2016 — Question 73

You implement Software Defined Networking (SDN) by using the Network Controller server role.
You have a virtual network named VNET1 that contains servers used by developers.
You need to ensure that only devices from the 192.168.0.0/24 subnet can access the virtual machine in VNET1.
What should you configure?

Answer options

• A. Dynamic Access Control
• B. role-based access control
• C. a network security group (NSG)
• D. a universal security group

Correct answer: C

Explanation

The correct answer is C, a network security group (NSG), because NSGs allow you to create rules that control inbound and outbound traffic to network interfaces and subnets based on IP address ranges. Options A and B do not specifically control network traffic, and option D, a universal security group, is not used for this type of access restriction.