Reply To: AZ-104, Timed Set 3, Question 10.

[Irene-TutorialsDojo]

Hello Margulan Aubakirov,

Thank you for your question!

You’re absolutely correct. In this scenario, traffic is blocked at the subnet level by TDNSG1’s rules (priority 310), and NIC association is not required. Since the subnet NSG processes first, it denies traffic to TD2 before it even reaches the NIC.

Regarding the statement about TDNSG1 being associated with TD2’s NIC, it’s not needed for this traffic flow to be blocked. The traffic is already restricted at the subnet level, making NIC association unnecessary in this case.

Please let me know if you have any further questions or need more clarification!

Best regards,

Irene @ Tutorials Dojo