Topic 1 · Question 220
A. Azure Firewall
B. an application security group
C. Azure DDoS protection
D. a network security group (NSG)
Top comment
Community votes:A · 2 (100%)
winston_45▲ 64Highly votedOctober 12, 2020 07:51 am
NSG is for traffic inside a same virtual network, not a gateway between several networks.
12 more highly voted comments
Min_Thu▲ 56Highly votedMarch 21, 2021 12:29 pm
The Azure Firewall service complements network security group functionality. Together, they provide better "defense-in-depth" network security. Network security groups provide distributed network layer traffic filtering to limit traffic to resources within virtual networks in each subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which provides network- and application-level protection across different subscriptions and virtual networks.
NSG can filter network within subscription and Azure firewall is across different subscription. So Ans is Azure Firewall
NSG can filter network within subscription and Azure firewall is across different subscription. So Ans is Azure Firewall
Hibin▲ 40Highly votedAugust 28, 2021 04:42 pm
No, we have to answer blindly without knowing what is being asked.
vate01▲ 37Highly votedMay 14, 2020 02:18 am
I was here.
alex100▲ 22Highly votedMay 31, 2020 12:22 pm
You were not alone ;)
tartar▲ 17Highly votedMay 14, 2020 11:31 am
why not NSG?
Omar5▲ 13Highly votedMarch 03, 2021 01:40 am
It says "what service", NSG is not an Azure service.
iWasTed▲ 12Highly votedJuly 16, 2020 06:43 pm
NSG is for traffic inside a same virtual network, not a gateway between several networks.
Achab▲ 11Highly votedFebruary 24, 2023 11:11 am
Why does universe exist ? What is our purpose here ? Why are we here ?
gelato▲ 8Highly votedJune 12, 2020 11:32 am
An NSG is a firewall, albeit a very basic one. It's a software-defined solution that filters traffic at the Network layer. However, Azure Firewall is more robust. It's a managed firewall service that can filter and analyze L3-L4 traffic, as well as L7 application traffic
mufflon▲ 7Highly votedDecember 11, 2021 06:49 pm
Network security groups provide distributed network layer traffic filtering to limit traffic to resources within virtual networks in each subscription. Azure Firewall is a fully stateful, centralized network firewall as-a-service, which provides network- and application-level protection across different subscriptions and virtual networks.
Olabua▲ 7Highly votedJanuary 30, 2021 04:38 am
This site is unique.
theOtherGuy▲ 7Highly votedSeptember 04, 2020 10:59 pm
The Keyword here is across subscriptions. "You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks"
https://docs.microsoft.com/en-us/azure/firewall/overview
https://docs.microsoft.com/en-us/azure/firewall/overview