Deploying Web Servers and Database Servers in Azure with Controlled Connection Types
Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify an Azure firewall.
Does this meet the goal?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.A
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability.
In this question, we need to add a rule to Azure Firewall to allow the connection to the virtual machine on port 80 (HTTP).
https://docs.microsoft.com/en-us/azure/firewall/overviewThe given scenario states that there are multiple Azure virtual machines in an Azure environment, and the goal is to make a specific virtual machine named VM1 accessible from the internet over HTTP. The proposed solution is to modify an Azure firewall.
An Azure firewall is a cloud-based network security service that allows or denies access to Azure resources. It is designed to protect Azure virtual networks and can be used to filter network traffic for both inbound and outbound traffic.
However, modifying an Azure firewall alone is not sufficient to make a virtual machine accessible from the internet over HTTP. An Azure firewall can be used to control network traffic for a virtual network, but it does not directly enable access to a specific virtual machine.
To make a virtual machine accessible from the internet over HTTP, the following steps can be taken:
- Assign a public IP address to the virtual machine.
- Create an inbound security rule to allow HTTP traffic on port 80 in the network security group associated with the virtual machine.
- Ensure that the appropriate endpoints are open on the virtual machine's operating system firewall to allow HTTP traffic.
Therefore, the solution proposed in the question is not sufficient to meet the goal. The correct answer is B. No.
