Microsoft Azure Fundamentals — Question 59

You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?

Answer options

• A. a network security group (NSG)
• B. an Azure Active Directory (Azure AD) role
• C. an Azure Active Directory group
• D. an Azure key vault

Correct answer: A

Explanation

The correct answer is A, as a network security group (NSG) is specifically designed to control inbound and outbound traffic to Azure resources by defining rules for allowed ports. Options B and C are related to identity management and do not pertain to network traffic control, while option D, an Azure key vault, is used for managing secrets and keys, not for controlling network access.