Skip to main content
Answer confirmed
Question

Which of the following options is first evaluated for inbound network traffic?

Proposed answer
  • The NSG applied to the network interface.
  • The NSG applied to the subnet.
  • The NSG applied to the network appliance.
Correct answer

The NSG applied to the subnet.

Inbound traffic is first evaluated by the NSG applied to the subnet. However, outbound traffic from a VM is first evaluated by the application security group applied to the network interface.