Implement and Manage Virtual Networking
Targeted AZ-104 practice for this exam objective, with an explanation for every answer option.
- Certification
- AZ-104
- Domain
- Implement and Manage Virtual Networking
- Questions
- 9
Practice AZ-104 Implement and Manage Virtual Networking questions with exam-style scenarios, detailed explanations, and option-by-option rationale for this domain.
Example question from this objective
Each option is explained, so the reasoning behind the distractors is part of the answer.
An NSG has priority 100 Allow HTTPS and priority 200 Deny all. What is the effective behavior?
- The rules cancel out and require a service endpoint.
- HTTPS is allowed first; lower priority numbers are evaluated earlier.
- Both rules are ignored unless attached to a route table.
- The deny rule applies first because deny always overrides allow.
The rules cancel out and require a service endpoint. — NSG rules do not cancel out, and service endpoints are unrelated to rule precedence.
HTTPS is allowed first; lower priority numbers are evaluated earlier. — Correct. NSG rules are processed by ascending priority number, so the allow rule at 100 matches HTTPS before the deny at 200.
Both rules are ignored unless attached to a route table. — NSGs attach to subnets or NICs; route tables are separate.
The deny rule applies first because deny always overrides allow. — Deny does not automatically override a lower-numbered allow rule that has already matched.