SC-100 Practice Question 3975
Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: medium
An architect needs to isolate internal microservices communicating within a single Azure Virtual Network without creating dozens of complex subnets. Which networking feature allows applying security rules based on workload roles?
Answer Options
A
Application Security Groups (ASGs)
B
Splitting workloads into 100 individual VNets
C
Hardware proxy appliances in on-premises datacenters
D
Assigning public IPs to all internal microservice instances
Correct Answer
A: Application Security Groups (ASGs)
Explanation
Application Security Groups (ASGs) allow administrators to group virtual network interfaces logically (e.g., "Web-Tier", "DB-Tier") and use those groups as source/destination in NSG rules.