Correct Answer: Azure Firewall is a managed, cloud-based network security service that protects your VNet resources at Layer 3-7 and across subscriptions; NSGs are simpler Layer 4 filters
Azure Firewall provides advanced features like threat intelligence-based filtering and FQDN filtering that NSGs do not support....
Correct Answer
Azure Firewall is a managed, cloud-based network security service that protects your VNet resources at Layer 3-7 and across subscriptions; NSGs are simpler Layer 4 filters
Why This Answer Is Correct
Azure Firewall provides advanced features like threat intelligence-based filtering and FQDN filtering that NSGs do not support.
This question evaluates your knowledge of Azure Firewall — a core concept tested in Microsoft Certified: Azure Administrator Associate (AZ-104). Understanding Azure Firewall is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?
You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?
Which Azure Firewall feature allows you to filter outbound traffic based on a list of domain names (e.g., allow *.microsoft.com)?
What is 'Azure Firewall Premium' specifically designed for?
In a Hub-and-Spoke network topology, where is the Azure Firewall typically deployed?