Exam AZ-104 topic 5 question 40 discussion

Full explanation: Correct Answer is A: Associate Virtual Machines An application security group is a logical collection of virtual machines (NICs). You join virtual machines to the application security group, and then use the application security group as a source or destination in NSG rules. The Networking blade of virtual machine properties has a new button called Configure The Application Security Groups for each NIC in the virtual machine. If you click this button, a pop-up blade will appear and you can select which (none, one, many) application security groups that this NIC should join, and then click Save to commit the change. https://petri.com/understanding-application-security-groups-in-the-azure-portal#:~:text=You%20can%20start%20the%20process,Application%20Security%20Group%20blade%20appears.

Correct Answer: A Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups. You can reuse your security policy at scale without manual maintenance of explicit IP addresses. The platform handles the complexity of explicit IP addresses and multiple rule sets, allowing you to focus on your business logic. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/application-security-groups https://tutorialsdojo.com/network-security-group-nsg-vs-application-security-group

A is correct

A is right

You can use the Tthe Networking blade of virtual machine to add a machine to one or more ASGs

Correct Answer: A https://docs.microsoft.com/en-us/azure/virtual-network/application-security-groups

A is correct An application security group is a logical collection of virtual machines (NICs). You join virtual machines to the application security group, and then use the application security group as a source or destination in NSG rules.

ASG are not much covered in the Learn module, not that I remember. Answer is correct

Answer is correct. Application security group ASG can be associated with NIC

A is answer Associate Virtual Machines An application security group is a logical collection of virtual machines (NICs). You join virtual machines to the application security group, and then use the application security group as a source or destination in NSG rules. The Networking blade of virtual machine properties has a new button called Configure The Application Security Groups for each NIC in the virtual machine. If you click this button, a pop-up blade will appear and you can select which (none, one, many) application security groups that this NIC should join, and then click Save to commit the change. https://petri.com/understanding-application-security-groups-in-the-azure-portal#:~:text=You%20can%20start%20the%20process,Application%20Security%20Group%20blade%20appears.

ASG cannot only be added to NIC so the only option according to MS docs.

Came in exam 1st Feb 2021. Selected A

All network interfaces assigned to an application security group have to exist in the same virtual network that the first network interface assigned to the application security group is in. For example, if the first network interface assigned to an application security group named AsgWeb is in the virtual network named VNet1, then all subsequent network interfaces assigned to ASGWeb must exist in VNet1. You cannot add network interfaces from different virtual networks to the same application security group.

ASG are NOT in exams. Check on site.

Answer is correct. "A" ASG is a virtual grouping of VMs through their NIC. Accordingly, you need to connect NIC to ASG.

Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups

Answer: A Refer https://tutorialsdojo.com/network-security-group-nsg-vs-application-security-group/