Microsoft · AZ-700
NSGs, flow logs, and Bastion
AZ-700 · Lesson 18 of 20 · 2:25:26
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-700 exam (Microsoft Certified: Azure Network Engineer Associate). In this lesson: network security groups, their rules, priorities, default rules, and evaluation order, application security groups and service tags, virtual network flow logs and traffic analytics, IP flow verify, Azure Bastion with its SKUs and required NSG rules, and security admin rules in Azure Virtual Network Manager. Includes three original practice questions.
Preview the topics
- Database servers must accept port 1433 only from the application servers, whose addresses change as they scale. What should the rule use?
- Admins want to use the RDP client on their own laptops through Bastion, and auditors want a recording of every session. Which SKU fits?
- The security team must block RDP from the internet on every virtual network, even if a team’s security group allows it. What should it deploy?