Free sampleConfigure and Manage Virtual Networkingmedium
An administrator allows outbound traffic to any address over port 80 with a single outbound rule and authors no inbound rule for the return path. A colleague says responses to that allowed outbound traffic will still return because the network security group keeps a flow record per connection. Is the colleague correct?
- AYes Correct
- BNo
Network security groups are stateful, so allowed outbound traffic gets its responses back without a matching inbound rule, and the reverse also holds. A flow record makes the network security group stateful, so if you allow outbound traffic over a port it is not necessary to specify an inbound rule for the response; an inbound rule is only needed when communication is initiated externally.
Why A is correct: Correct. A flow record makes the network security group stateful, so if you allow outbound traffic over a port it is not necessary to specify an inbound rule for the response; an inbound rule is only needed when communication is initiated externally.
Why B is wrong: Answering No treats the group as stateless, but the flow record allows the response to return without a separately authored inbound rule.