You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 is associated to a network security group (NSG) named NSG1. NSG1 blocks all outbound traffic that is not allowed explicitly.
Subnet1 contains virtual machines that must communicate with the Azure Cosmos DB service.
You need to create an outbound security rule in NSG1 to enable the virtual machines to connect to Azure Cosmos DB.
What should you include in the solution?

A. a service tag

B. a service endpoint policy

C. a subnet delegation

D. an application security group








 

Suggested Answer: A

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/service-tags-overview
 https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-portal

This question is in AZ-700 Designing and Implementing Microsoft Azure Networking Solutions Exam
For getting Microsoft Certified: Azure Network Engineer Associate Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.