Firewall PBQs: Designing and Implementing Microsoft Azure Networking Solutions (AZ-700)

You are an Azure network engineer configuring NSG rules for Spoke A (10.2.0.0/24) in a hub-spoke topology. The spoke currently allows SSH from the entire internet. Per your organization's security baseline, SSH must only be allowed from the hub subnet (10.1.0.0/24) where the bastion host resides. HTTPS traffic from the internet must continue to be allowed. Review the inbound NSG rules and correct the SSH misconfiguration.