You are managing a Network Security Group (NSG) named NSG-Production. Currently, NSG-Production contains an inbound security rule named Deny-HTTP with a priority of 250 that blocks all inbound TCP traffic on port 80. You need to allow inbound HTTP traffic specifically from a partner's IP address of 198.51.100.15, while continuing to block port 80 traffic from all other sources. Which priority should you assign to the new inbound rule that allows HTTP traffic from 198.51.100.15?
- 150Answer
- B250
- C350
- D65000
Answer
A priority of 150
In Azure Network Security Groups, rules are processed in order of priority from the lowest number to the highest number. To allow traffic that would otherwise be blocked by a rule with priority 250, the new allow rule must have a lower priority number (higher precedence), such as 150. This ensures that the traffic from the partner's IP address matches the allow rule first and is permitted before the deny rule is evaluated.
Step-by-Step Solution
Key Concept
Azure Network Security Group (NSG) rule evaluation order is based on priority numbers, where lower numbers have higher precedence.
Estimated Time:45s