Microsoft AZ-104 Exam - Topic 14 Question 90 Discussion

Actual exam question for Microsoft's AZ-104 exam

Question #: 90
Topic #: 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You create a resource lock, and then you assign the lock to the subscription.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Amber at Mar 07, 2024, 06:06 AM

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Percy

4 months ago

Resource locks are for preventing changes, not for traffic control.

upvoted 0 times

...

Shaunna

4 months ago

Nope, you need to set NSG rules directly for that.

upvoted 0 times

...

Miriam

4 months ago

Wait, so a lock won't block traffic? That's surprising!

upvoted 0 times

...

Justine

4 months ago

Totally agree, that's not the right approach!

upvoted 0 times

...

Emerson

5 months ago

A resource lock doesn't control NSG rules.

upvoted 0 times

...

Frederica

5 months ago

I vaguely recall something about NSGs needing to be configured directly to block specific ports. A resource lock doesn't seem like it would accomplish that.

upvoted 0 times

...

Sina

5 months ago

I feel like this is a trick question. Locks are for resource management, not for configuring network security. So, I think the answer is B.

upvoted 0 times

...

Page

5 months ago

I remember practicing a question about NSGs, and I think they are the ones that control traffic. A resource lock seems unrelated to that.

upvoted 0 times

...

Romana

5 months ago

I'm not sure if a resource lock would actually block traffic like that. I thought locks were more about preventing changes rather than enforcing security rules.

upvoted 0 times

...

Izetta

5 months ago

Okay, let me see if I can figure this out. Since the question states that another administrator will be creating the NSGs, I think the key is to ensure that the NSG rules are set up correctly from the start, rather than using a resource lock. I'll need to review the NSG configuration options to see how I can achieve the desired port blocking.

upvoted 0 times

...

Fannie

5 months ago

Hmm, I'm a bit confused. A resource lock is used to prevent accidental deletion or modification of resources, not to configure network security rules. I'll need to think this through more carefully.

upvoted 0 times

...

Jade

5 months ago

I'm not sure this solution will work. Blocking TCP port 8080 between virtual networks seems more like a network security group (NSG) configuration issue rather than a resource lock.

upvoted 0 times

...

Alyssa

6 months ago

I think the solution provided is not quite right. A resource lock won't automatically block TCP port 8080 between the virtual networks. I'll need to explore other options, like creating a custom NSG rule or using Azure Firewall, to meet the requirement.

upvoted 0 times

...

Tasia

6 months ago

No problem, I've got this. I'll use the find function, locate the word, and then delete it. Shouldn't take more than a minute or two.

upvoted 0 times

...

Luis

6 months ago

This is a tricky one. I'm torn between the Account Manager and the Customer Success Manager. Both of them seem like they could be responsible for making sure the customer is satisfied. I'll have to weigh the pros and cons of each option.

upvoted 0 times

...

Cheryl

6 months ago

I've got this! The Application Pattern Type is all about the application's structure and deployment, so I'm pretty sure the answer is A and B.

upvoted 0 times

...

Avery

6 months ago

Okay, I've got this. The key is to understand the different node personality options and how they affect the scaling process. I think the "default" option is probably the safest bet, but I'll double-check the documentation to be sure.

upvoted 0 times

...

Junita

10 months ago

The solution is definitely 'No' here. We need to configure the appropriate NSGs to block the specific port between the virtual networks, not create a resource lock.

upvoted 0 times

Alana

9 months ago

Let's make sure to set up the NSGs correctly to restrict the traffic between the virtual networks.

upvoted 0 times

...

Stevie

9 months ago

Agreed, creating a resource lock won't achieve the goal of blocking TCP port 8080.

upvoted 0 times

...

Felicidad

9 months ago

We need to configure the NSGs to block the port, not create a resource lock.

upvoted 0 times

...

Lenna

11 months ago

Haha, this question is tricky. Creating a resource lock to block a port? That's like using a hammer to swat a fly - it might work, but it's definitely not the right tool for the job.

upvoted 0 times

Ceola

9 months ago

User 3: Yeah, it doesn't sound like the most efficient solution.

upvoted 0 times

...

Amina

10 months ago

User 2: Definitely, there must be a better way to achieve that goal.

upvoted 0 times

...

Ammie

10 months ago

User 1: I agree, using a resource lock to block a port seems like overkill.

upvoted 0 times

...

Beth

11 months ago

Yeah, I agree. A resource lock is meant to prevent accidental deletion or modification of resources, not to control network traffic between VNets.

upvoted 0 times

Dannie

9 months ago

I agree, B) No is the right choice in this scenario.

upvoted 0 times

...

Aleisha

9 months ago

I think B) No is the correct answer. Resource locks are not used to control network traffic between virtual networks.

upvoted 0 times

...

Carlton

10 months ago

B) No

upvoted 0 times

...

Eulah

10 months ago

A) Yes

upvoted 0 times

...

Tomoko

11 months ago

A resource lock doesn't seem like the right solution to block a specific port between virtual networks. That's more of a network security group (NSG) configuration task.

upvoted 0 times

...