Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-700 Exam - Topic 1 Question 100 Discussion

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.What should you add to NSG1?
C) an inbound rule that has a priority of 4096 and blocks all internet traffic
A) an outbound rule that has a priority 100 and blocks all internet traffic
B) an outbound rule that has a priority of 4096 and blocks all internet traffic
D) an inbound rule that has a priority of 100 and blocks all internet traffic

Microsoft AZ-700 Exam - Topic 1 Question 100 Discussion

Actual exam question for Microsoft's AZ-700 exam
Question #: 100
Topic #: 1
[All AZ-700 Questions]

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1

You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.

You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.

What should you add to NSG1?

Show Suggested Answer Hide Answer
Suggested Answer: C

by Brock at Jun 18, 2026, 02:32 PM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Melissa
23 days ago
But blocking all internet traffic is crucial for security. Option D ensures that.
upvoted 0 times
...
Cory
29 days ago
I disagree. Option A seems better since it has a higher priority.
upvoted 0 times
...
Tien
1 month ago
I think option D is the best choice. It blocks all internet traffic effectively.
upvoted 0 times
...
Catalina
1 month ago
Not sure about that, though. Wouldn't that affect other services?
upvoted 0 times
...
Carma
1 month ago
Option A sounds better for minimizing impact.
upvoted 0 times
...
Malika
2 months ago
Wait, blocking all internet traffic? That seems extreme.
upvoted 0 times
...
Terrilyn
2 months ago
Definitely agree with that!
upvoted 0 times
...
Tegan
2 months ago
I think option D is the way to go.
upvoted 0 times
...
Jerry
2 months ago
I’m leaning towards option A because it blocks all internet traffic, but I wonder if the priority of 100 is too high. I need to double-check how priorities work in NSGs.
upvoted 0 times
...
Shalon
2 months ago
If we want to ensure only VNet1 traffic is allowed, blocking all internet traffic seems crucial. I feel like option D could be the right answer, but I’m a bit hesitant about the priority.
upvoted 0 times
...
Rozella
3 months ago
I remember practicing a similar question where we had to block internet traffic. I think an inbound rule might be the right choice here, but I can't recall the exact priority.
upvoted 0 times
...
Kristofer
3 months ago
I think we need to focus on inbound rules since we want to control traffic coming into AppGw1. But I'm not sure about the priority levels.
upvoted 0 times
...

Save Cancel