(AZ-900:Q-218) Azure network security group (NSG) 被用来进行数据控制

Your company plans to deploy several web servers and several database servers to Azure.

You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers.

What should you include in the recommendation?

Answer

Correct Answer: A

A network security group (NSG) is the appropriate solution because it allows you to control network traffic to and from Azure resources by permitting or denying rules. NSGs can be applied to subnets or individual network interfaces within a virtual network, making it ideal for managing connections between web servers and database servers.

You can explicitly define which types of connections (e.g., specific ports and protocols) are allowed or denied, which is essential for securing communication in a multi-server setup.