Microsoft AZ-700 Exam - Topic 2 Question 99 Discussion

Actual exam question for Microsoft's AZ-700 exam

Question #: 99
Topic #: 2

You have an Azure virtual network named Vnet1.

You need to ensure that the virtual machines in Vnet1 can access only the Azure SQL resources in the East US Azure region. The virtual machines must be prevented from accessing any Azure Storage resources.

Which two outbound network security group (NSG) rules should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

Aa deny rule that has a source of Virtual Network service tag and a destination of Sql service tag

Ba deny rule that has a source of IP address range of Vnet1 and destination of Storage service tag.

Ca deny rule that has a source of VirtualNetwork service tag and a destination of 168.63.129.0/24 IP Addresses

Dan allow rule that has a source of IP address range of Vnet1 and destination of Sql.EastUS service tag

Show Suggested Answer

Suggested Answer: B, D

by Carman at May 29, 2026, 12:47 AM

Limited Time Offer

25%

Off

Get Premium AZ-700 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!