# Azure Fundamentals: Azure Network Security ### Question 1: Which Azure CLI command shows existing Network Security Groups? >az network nsg list ### Question 2: What is the Azure Firewall associated with when protecting Azure? >VNet Subnet ### Question 3: You have enabled just in time (JIT) access for a Windows VM, yet you still cannot connect to it using RDP. What is the most likely cause of the problem? >You have not requested access to the VM ### Question 4: Which methods can be used to install an antimalware agent through the Azure Portal? >VM properties blade >Azure Security Center ### Question 5: You are troubleshooting Azure Backup failures. Which of the following is the most likely reason for the failure? >Microsoft Services do not have access to the storage account ### Question 6: Which statement regarding jump boxes is correct? >It must be publicly accessible ### Question 7: Which statement regarding Azure Advanced Threat Protection (ATP) is incorrect? >ATP licensing is automatic when you create an Azure subscription ### Question 8: You are configuring Azure Firewall Application Rules to allow outbound access to *.quick24x7.com. You have created the Azure Firewall and associated it with the appropriate subnet. Which additional configuration is required? >Route Table ### Question 9: You are creating Network Security Groups and rules using PowerShell. Which strategy should you adopt? >Get-AzNetworkSecurityGroup | Add-AzNetworkSecurityRuleConfig | Set-AzNetworkSecurityGroup ### Question 10: Which rule property controls the order of rule execution? >Priority ### Question 11: Which items can a Network Security Group (NSG) associated with? >Subnet >VM network interface ### Question 11: Which of the following are Azure DDoS Mitigation offerings? >Standard >Basic