Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which Azure service is responsible for controlling inbound network traffic to resources?

1. A Load Balancer

2. B Gateway

3. C Network security group

4. D Traffic manager

The correct answer is: C Network security group

The correct answer is indeed the network security group. A network security group (NSG) is used in Azure to manage and control inbound and outbound network traffic to resources in a virtual network. It allows you to create rules to define what traffic is allowed or denied, based on various criteria such as source and destination IP addresses, ports, and protocol types. In an Azure environment, implementing NSGs enables enhanced security by allowing only specific types of traffic to reach your resources, ensuring that only legitimate access is permitted. The other choices serve different functions. Load balancers, for example, distribute incoming traffic across multiple resources to enhance reliability and performance but do not directly control traffic based on security rules. Gateways typically relate to connecting different networks or to support VPNs. Traffic managers are more concerned with directing global traffic across multiple geographic regions rather than managing inbound traffic to individual resources.