Microsoft Azure Administrator (AZ104) Practice Exam

How can network security groups (NSGs) be configured to apply to multiple virtual networks automatically?

1. Through Azure Resource Manager policies

2. Using Azure Traffic Manager

3. By scripting with Azure PowerShell

4. By configuring them individually for each virtual network

The correct answer is: Through Azure Resource Manager policies

Network security groups (NSGs) can be configured to apply to multiple virtual networks automatically using Azure Resource Manager (ARM) policies. ARM policies allow for the governance and management of Azure resources by enforcing rules and compliance across multiple subscriptions and resource groups. By leveraging ARM policies, administrators can define conditions under which certain actions are permitted or restricted, including the application of NSGs across various virtual networks. Using ARM policies provides a systematic approach to managing and ensuring consistent security settings without the need for manual configuration for each virtual network. This approach significantly reduces the administrative overhead and potential for human error, leading to more efficient resource management and increased security. The other options in the list do not facilitate the automatic application of NSGs across multiple virtual networks. Azure Traffic Manager, for instance, is primarily used for load balancing and optimizing the performance of applications by directing traffic based on the network location of the user, rather than managing security groups. Scripting with Azure PowerShell, while powerful, requires manual effort to apply NSGs to each network individually, which does not align with the goal of automatic application. Configuring NSGs individually for each virtual network is also inefficient and does not scale well, especially in large environments with numerous virtual networks.