Microsoft Azure Fundamentals AZ-900 — Topic 1 Question 391

Question

What should you use to prevent traffic from an Azure virtual network from being routed to an Azure Storage account via the internet?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: a network security group (NSG) A Network Security Group (NSG) filters inbound and outbound traffic to subnets and NICs with allow/deny rules. A Network Security Group (NSG) applies allow/deny rules to control traffic at the subnet or NIC level.

Microsoft Azure Fundamentals AZ-900 — Question 391