MENU
You have an Azure subscription that contains 10 virtual machines, a key vault named Vault 1, and a network security group (NSG) named NSG1. All the resources are deployed to the East US Azure region.
The virtual machines are protected by using NSG1. NSG1 is configured to block all outbound traffic to the internet.
You need to ensure that the virtual machines can access Vault1. The solution must use the principle of least privilege and minimize administrative effort.
What should you configure as the destination of the outbound security rule for NSG1 ?
Suggested Answer: C
Get Premium AZ-104 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
RO
Rose
11 months ago
I’m not sure about C, what if the service tag changes?
KR
Kristin
11 months ago
An IP address range seems too restrictive for this.
PE
Peter
12 months ago
Wait, can we really use service tags for key vault access?
EM
Emerson
12 months ago
Definitely agree with that! Service tags simplify things.
VI
Vincent
1 year ago
I think option C is the best choice.
MA
Mary
1 year ago
I’m a bit confused about application security groups. Do they even apply here, or is that just for grouping VMs?
MA
Mable
1 year ago
I feel like we practiced a similar question where we had to allow access to a specific Azure service. I think it was about using a service tag too.
SH
Sheldon
1 year ago
I'm not entirely sure, but I think using an IP address range might be too broad for least privilege.
JA
Jaclyn
1 year ago
I remember we discussed service tags in class, and they simplify NSG rules. Could it be option C?
EM
Emerson
1 year ago
I remember the professor emphasizing the importance of distinguishing between different data types. I'll double-check my notes to make sure I have this right.
AP
Apolonia
1 year ago
Okay, let's think this through step-by-step. The key is to identify the correct combination of Type, Name, and Value for the protected Resource policy.