Azure NSG Rules & Security Groups Quiz

1. What happens when an inbound NSG rule specifies a destination port range of 80-443?

Only port 80 is filtered

Only port 443 is filtered

Ports 80 through 443 are filtered

Ports 80 and 443 are filtered, but not those in between

2. When deploying an NSG, what is the recommended approach for managing rule changes in production?

Manually edit rules directly in the portal

Use Infrastructure as Code (ARM templates, Terraform) and version control

Apply rules without testing

Use only default rules provided by Azure

3. What is the purpose of the 'Source Port Range' field in an NSG inbound rule?

To specify which ports the destination VM listens on

To specify the source VM's port from which traffic originates

To restrict outbound traffic only

It is not used for inbound rules

4. An NSG rule specifies 'Access: Deny' and 'Priority: 150'. Another rule specifies 'Access: Allow' with 'Priority: 200' for the same traffic. Which action is taken?

Deny (lower priority number evaluated first)

Allow (higher priority number evaluated first)

Both rules apply in sequence

The system prompts for manual intervention

5. To allow SSH traffic (port 22) from a specific IP address 203.0.113.5 to your Azure VM, which protocol should the NSG rule use?

UDP

TCP

ICMP

HTTP

6. Which NSG rule direction applies to traffic leaving a virtual machine?

Inbound

Outbound

Bidirectional

Internal

7. How can you enable flow logs to monitor traffic filtered by NSG rules?

Through NSG Flow Logs in Network Watcher

By enabling diagnostics on the virtual machine

Through Application Insights only

NSG flow monitoring is not available

8. An NSG is associated with a subnet and a network interface. If they have conflicting rules, which is applied?

The subnet NSG rule takes precedence

The network interface NSG rule takes precedence

Both rules are evaluated; the most restrictive applies

Neither rule is applied

9. When you create an NSG rule with source as a service tag (e.g., 'AzureKeyVault'), what does this represent?

A specific VM name

A range of IP addresses for that Azure service

A custom user-defined tag

A security group from another subscription

10. Azure provides default NSG rules. Which default rule has the highest priority number?

AllowInternetOutbound

DenyAllInbound

AllowVNetInBound

AllowAzureLoadBalancerInBound

11. What is the primary purpose of a Network Security Group (NSG) in Azure?

To manage virtual machine pricing

To filter network traffic using inbound and outbound rules

To store encryption keys

To monitor application performance

12. NSG rules can be applied at which Azure resource level?

Subscription level only

Subnet and network interface level

Resource group level only

Virtual machine level only

13. What is the maximum number of rules allowed in a single NSG?

50 rules

100 rules

1000 rules

5000 rules

14. Which NSG rule allows inbound traffic on port 443 from any source?

Protocol: TCP, Destination Port: 443, Source: 0.0.0.0/0

Protocol: UDP, Destination Port: 443, Source: 10.0.0.0/8

Protocol: ICMP, Destination Port: 443, Source: *

Protocol: TCP, Destination Port: 80, Source: 0.0.0.0/0

15. Can you apply multiple NSGs to a single subnet in Azure?

Yes, up to 10 NSGs

No, only one NSG per subnet

Only if they have different priorities

Yes, but only in premium regions

16. What does the asterisk (*) wildcard represent in an NSG rule's source or destination field?

Any single character

Any IP address or port

Only private IP addresses

Only public IP addresses

17. An NSG rule has a priority of 100 and action 'Deny'. Another rule has priority 200 and action 'Allow' for the same traffic. Which rule is applied?

Priority 100 (Deny)

Priority 200 (Allow)

Both rules apply simultaneously

The rule with the highest port number applies

18. Which transport protocol can NSG rules filter traffic on?

TCP only

UDP only

TCP, UDP, and ICMP

HTTP and HTTPS only

19. What is the default action for inbound traffic in an Azure NSG?

Allow all

Deny all

Allow specific ports only

Prompt the user

20. In NSG rule priority, which number range is evaluated first?

100-200

1-4096

Lower numbers are evaluated before higher numbers

Higher numbers are evaluated before lower numbers

Azure Network Engineer Network Security Group Rules Quiz