Exam AZ-104 topic 5 question 36 discussion

So, if you're so smart what are you doing on this site?

The more stupid questions they give, the higher chances of passing the exam!

Error number 1: Plug not inserted. As an administrator, you must also be capable of solving the simplest everyday puzzles and not assume others possess your own technical skills. ;-)

Great explanation, but seriously, what a daft question.

Good Answer

Good Explanation

Excellent observation !

exactly as it sounds. denies everything coming in. In general, it is desired that firewall would block everything that isn't approved. so the idea of that rule is that you create other rules with higher priority ( lower number) which allow specific traffic that you want. for example RDP and internet connections. when traffic comes in it gets evaluated from the top priority to bottom until a rule is found that allows it or denies it in particular. so if there is a rule to allow rdp at the top, the RDP traffic comes in, the NSG goes through the list, finds the RDP rule first and stops reading other rules because it already got a pass. vice versa if there wasnt an RDP rule, the NSG would check all of the rules until it reached DenyALL and deny the connection based on that. to put it simply, the denyall rule at the end is put in so you wouldn't have to type out a couple of hundred different ports that you want to block and instead would need to allow just a couple of ports that you do actually need

if the Ip were static, was displayed, and you not know if VM is started or stopped. When IP is dynamic, it cannot be displayed, cause will be random assigned, WHEN VM is started. That is the indicator that the VM is stopped.