CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Understanding Azure Network Security: A Walkthrough of AZ-500 Question
Explore a key AZ-500 exam question on Azure network security, focusing on segmentation and exposure risks.
You may find that deciding how to secure Azure resources often trips candidates up. The nuances between different Azure features can be confusing, especially when they serve overlapping purposes.
The question
You are reviewing the security of your Azure Virtual Network and find that some resources are exposed to the internet. What Azure feature can you use to segment your network and limit exposure to specific resources?
A. Network Security Groups (NSGs)
B. Azure Sentinel
C. Azure Policy
D. Private Endpoints
Think before you scroll
Before jumping to an answer, consider the primary function of each option. What specifically addresses network segmentation and limits internet exposure? Analyze their capabilities in context with Azure networking.
The answer
The correct option is A. Network Security Groups (NSGs). NSGs allow you to create rules that control inbound and outbound traffic to network interfaces and subnets. This capability is essential for segmenting your network and limiting exposure to specific resources.
Why the other options lose
- B. Azure Sentinel: This is a security information and event management tool. While it provides visibility into security events, it does not directly address network segmentation or limit exposure of resources.
- C. Azure Policy: This feature is designed for resource compliance and governance. It ensures resources comply with organizational standards but does not manage traffic flow or segmentation directly.
- D. Private Endpoints: While Private Endpoints provide private access to Azure services, they do not segment traffic in the same way NSGs do. They help restrict access but do not control the inbound and outbound traffic rules.
The concept behind it
Understanding how NSGs function is crucial for managing Azure security. They apply to both network interfaces and subnets, allowing you to enforce rules that dictate what traffic is allowed in or out. This principle of traffic control is vital for effective network security.
Exam trap to remember
Remember: NSGs are your go-to for controlling traffic and limiting exposure in Azure networks. Always assess whether the question is about traffic management or compliance to select the right tool.