Microsoft Azure Administrator (AZ104) Practice Exam

You have an Application Security group ASG1 and a virtual machine VM1. How can you apply ASG1 to VM1?

1. Modify the properties of NSG1.

2. Modify the properties of ASG1.

3. Associate NIC1 to ASG1.

4. Change VM1's attached disk settings.

The correct answer is: Associate NIC1 to ASG1.

To apply an Application Security Group (ASG) to a virtual machine (VM), you need to associate the network interface card (NIC) of that VM with the ASG. By associating the NIC to ASG1, you effectively group the virtual machine within that application security context, allowing you to manage access control and security rules for network traffic more flexibly. This is particularly useful in scenarios where you want to apply the same network security policies to multiple VMs that share similar roles or functionalities. In Azure, application security groups simplify the management of network security rules because you can create NSG rules that apply to a group rather than managing each VM individually. Once the NIC of VM1 is associated with ASG1, it inherits the security rules defined for ASG1, making it straightforward to manage security policies for applications. Modifying the properties of the network security group (NSG) or ASG1 does not directly apply the ASG to VM1; it instead adjusts the rules or settings of the group itself or the security policies that apply more broadly. Changing VM1's attached disk settings is unrelated to the application of security groups since disk settings pertain to storage management rather than network configuration.