Microsoft Azure Administrator — Question 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal?
Answer options
- A. Yes
- B. No
Correct answer: B
Explanation
The proposed solution does not meet the goal because assigning a built-in policy definition to the subscription does not automatically block TCP port 8080 between the virtual networks. Built-in policies can help enforce compliance, but they cannot inherently apply specific NSG rules or configurations directly when an NSG is created. Therefore, the correct answer is B.