Find out who can already reach the machine
Try this labAll AZ-900 practice
- Certification
- AZ-900
- Format
- Rule table
- Difficulty
- easy
- Estimated time
- 10 min
- Automated checks
- 6
SCENARIO
A management VM at 10.10.3.4 is intended to accept administration only from jump subnet 10.10.1.0/24. A developer in application subnet 10.10.2.0/24 nevertheless reached its management port. The NSG has no custom inbound rules, while application HTTPS connectivity still works.
TASK
Repair the inbound NSG rule table so TCP 3389 is reachable only from the jump subnet, while the application subnet retains TCP 443 access. Preserve the built-in rules and grant no additional access.