Knowledge Measure - NSG Service Bus Lab - Manually create the Experiement

1. Once the NSG is created, there are two very important steps needed prior to running the Experiment. What are they?

Answer

You need to enable the target and capabilities for the NSG.

2. Will the experiement run if the target and capabilities are not enabled?

Answer

No!

3. Are there any role assignments needed in order for the experiement to run?

Answer

Yes. You need to navigate to the NSG and create a Role Assignment for the Experiement and grant it Network Contributor.

4. In order to target Service Bus, what property do we use and can we use a Service Tag for this?

Answer

The property we need to set in the fault is destinationAddresses and yes, we use the service tag ServiceBus in order to target the Service Bus IP addresses.

5. Is the NSG Rule we created for Outbound or Inbound traffic?

Answer

Outbound

6. What would happen if we did not grant the Experiement Network Contributor to the NSG?

Answer

The experiement would fail and in the error details it should say access denied!

7. How long will the experiment run?

Answer

10 minutes

8. Can you use other service tags with an NSG Fault?

Answer

Yes.

9. What is the name of the rule that gets created when the experiment runs?

Answer

DenyAllOutBound

10. Does the DenyAllOutbound Service Bus rule get removed after the experiment finishes running?

Answer

Yes.