[&] Based on the diagram, which statements regarding VM-A are true? (Select all that apply)

![quiz image](http://ine-videos.s3.amazonaws.com/secure/microsoft/vod-3510/quiz-images/NSGQuizQuestion1.png)
- VM-B can connect via HTTP
- WS-I can connect via HTTPS -- Correct
- VM-B can connect via RDP -- Correct
- WS-I can connect via RDP

[&] Based on the diagram, how should NSGs be assigned to allow all necessary workloads while preventing unnecessary traffic?  Choose all answers that apply, each answer presents part of the solution.

![](http://ine-videos.s3.amazonaws.com/secure/microsoft/vod-3510/quiz-images/NSGQuizQuestion2.png)
- Assign an NSG with default rules to the edge subnet.
- Create an NSG and assign it to the edge subnet.  Add a rule that allows inbound requests to the webapps application security group on port 443.  Add a rule that allows inbound requests to the DNS application security group on port 53. -- Correct
- Create an NSG with a custom rule that allows inbound requests from the internet to the virtual network on port 53. Assign this to the network interface DNS-nic.  
- Create an NSG with a custom rule that allows inbound requests from the internet to the virtual network on port 443. Assign this to the network interface DNS-nic.  
- Create an application security group named webapps and assign it to the VM-WA1 and VM-WA2 virtual machines.  Create an application security group named DNS and assign it to the virtual machine VM-DNS. -- Correct