Answer-first summary for fast verification
Answer: Modify a network security group (NSG), Modify an Azure firewall
The question requires two solutions to make VM1 accessible from the internet over HTTP. Network Security Groups (NSG) are fundamental for controlling inbound/outbound traffic at the subnet or NIC level, and creating an inbound rule allowing HTTP (port 80) traffic would enable access. Azure Firewall is a centralized, network-level firewall service that can also allow HTTP traffic through application or network rules. The community discussion strongly supports B and D, with the top comment (355 upvotes) explicitly stating these as the correct answers, and multiple other comments reinforcing this consensus. Options A (Traffic Manager) and C (DDoS protection) are incorrect: Traffic Manager routes traffic but doesn't control access permissions, while DDoS protection mitigates attacks but doesn't enable specific protocol access.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the internet over HTTP. Which two actions provide a complete solution?
NOTE: Each correct selection is worth one point.
A
Modify an Azure Traffic Manager profile
B
Modify a network security group (NSG)
C
Modify a DDoS protection plan
D
Modify an Azure firewall
No comments yet.