Home › Azure AZ-500 › cloudcomputing › az500networking › Which Azure feature lets a security engineer gro…
Which Azure feature lets a security engineer group VMs by role (e.g. 'web tier', 'app tier') and reference those groups in NSG rules — without typing IP addresses?
AApplication Security Groups (ASGs)
BAzure Bastion
CAzure DNS
DAzure Cache for Redis
Answer & Solution
Correct answer: A. Application Security Groups (ASGs)
ASGs are role-based VM groupings used in NSG rules (per AZ-500 §2 ASGs). The others aren't traffic groupings.
Related questions
Which Azure Virtual Network feature should a security engineer use to define custom routinWhich Azure tool should a security engineer use to capture and analyse VNet traffic flows Which Microsoft Defender for Cloud feature lets a security engineer OPEN management ports Which Azure service lets a security engineer SSH or RDP into a VM through the Azure portalWhich Azure networking feature should a security engineer use to give an Azure storage accWhich Azure networking feature should a security engineer use to give a VM-hosted workloadWhich Azure DDoS protection tier should a security engineer recommend for an internet-faciWhich Azure global edge service should a security engineer use to protect a globally-distr