Exam AZ-700 topic 4 question 44 discussion

Create 2 outbount rules on subnet3-2 Allow subnet3-2 to subnet3-1 Deny subnet3-2 to any

Correct. By default, the subnets within a VNET can communicate with each other. That is why only 1 NSG with 1 association is needed for the task

I think this is how it needs to be configured To ensure that subnet3-2 can only access resources on subnet3-1 in Azure, you can use Network Security Groups (NSGs) and Service Endpoints. Here’s a step-by-step guide: Create Network Security Groups (NSGs): Create an NSG for subnet3-2 and another for subnet3-1. In the NSG for subnet3-2, add an inbound security rule that allows traffic to subnet3-1. Configure NSG Rules: For the NSG associated with subnet3-2, add a rule to allow traffic to subnet3-1: Source: subnet3-2 Destination: subnet3-1 Port: Any (or specify the required port) Action: Allow Apply NSGs to Subnets: Apply the NSG with the inbound rule to subnet3-2. Ensure subnet3-1 has an NSG that allows traffic from subnet3-2 if needed.