StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Network security and Security Service Edge

Practice question 343 of 498 · easy

A design needs to allow only specific network ports between Azure subnets. Which control directly meets that flow-filtering requirement?

Choose the single best answer.

  1. A.Network security groups
  2. B.Only a route table directing traffic between subnets
  3. C.Only an application security group with no enforcing NSG rules
  4. D.Only a WAF policy
Show the answer and explanation

✓ Correct answer

  • Network security groups

NSG rules directly filter permitted subnet flows and ports. WAF inspects supported web traffic. An application security group identifies resources for rules but does not enforce a filter by itself. A route table selects paths rather than defining port-based allow and deny decisions.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.