Microsoft Security, Compliance, and Identity Fundamentals — Question 206

Which two Azure resources can a network security group (NSG) be associated with? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. a virtual network subnet
• B. a network interface
• C. a resource group
• D. a virtual network
• E. an Azure App Service web app

Correct answer: A, B

Explanation

The correct answers are A and B because a network security group can be applied to a virtual network subnet and a network interface to control traffic. Options C, D, and E are incorrect as resource groups cannot be associated with an NSG, a virtual network requires a subnet for association, and Azure App Service web apps do not support NSG association.