Why network isolation matters in Azure - Test Your Understanding

Practice - 5 Tasks

1fill in blank

easy

Complete the code to create a virtual network in Azure.

Azure

az network vnet create --name [1] --resource-group MyResourceGroup --location eastus --address-prefix 10.0.0.0/16

Drag options to blanks, or click blank then click option'

AMyStorage

BMyVNet

CMyVM

DMySubnet

Attempts:

3 left

💡 Hint

Common Mistakes

Using a subnet or VM name instead of the virtual network name.

Confusing resource group name with virtual network name.

The --name parameter specifies the name of the virtual network. Here, MyVNet is the correct name for the virtual network.

2fill in blank

medium

Complete the code to create a subnet within the virtual network.

Azure

az network vnet subnet create --address-prefix 10.0.1.0/24 --name [1] --vnet-name MyVNet --resource-group MyResourceGroup

Drag options to blanks, or click blank then click option'

AMySubnet

BMyVNet

CMyResourceGroup

DMyNSG

Attempts:

3 left

💡 Hint

Common Mistakes

Using the virtual network name instead of subnet name.

Using resource group or network security group names.

The --name parameter here specifies the subnet name. MySubnet is the correct choice for a subnet.

3fill in blank

hard

Fix the error in the command to associate a network security group with a subnet.

Azure

az network vnet subnet update --name MySubnet --resource-group MyResourceGroup --vnet-name MyVNet --network-security-group [1]

Drag options to blanks, or click blank then click option'

AMyVNet

BMySubnet

CMyNSG

DMyResourceGroup

Attempts:

3 left

💡 Hint

Common Mistakes

Using the virtual network or subnet name instead of NSG name.

Using the resource group name.

The --network-security-group parameter requires the name of the network security group (NSG). MyNSG is the correct NSG name.

4fill in blank

hard

Fill both blanks to create a network security group and then create a rule to allow HTTP traffic.

Azure

az network nsg create --resource-group MyResourceGroup --name [1]
az network nsg rule create --resource-group MyResourceGroup --nsg-name [2] --name AllowHTTP --protocol tcp --priority 1000 --destination-port-range 80 --access allow --direction inbound

Drag options to blanks, or click blank then click option'

AMyNSG

BMyVNet

CMySubnet

DMyResourceGroup

Attempts:

3 left

💡 Hint

Common Mistakes

Using virtual network or subnet names instead of NSG name.

Using resource group name as NSG name.

Both commands use the network security group name. MyNSG is the correct name for the NSG in both places.

5fill in blank

hard

Fill all three blanks to create a virtual machine in a subnet with network isolation.

Azure

az vm create --resource-group [1] --name [2] --image UbuntuLTS --vnet-name MyVNet --subnet [3] --admin-username azureuser --generate-ssh-keys

Drag options to blanks, or click blank then click option'

AMyResourceGroup

BMyVM

CMySubnet

DMyNSG

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing NSG name with subnet name.

Using virtual network name instead of subnet name.

The VM creation command requires the resource group name, VM name, and subnet name. Here, MyResourceGroup, MyVM, and MySubnet are correct.