Which Azure networking feature inspects and filters traffic between subnets based on source/destination IP and port rules?
- A Azure Firewall (L7 FQDN-based)
- B Network Security Group (NSG) (correct answer)
- C Web Application Firewall (WAF)
- D Azure DDoS Protection
Shortcut: NSGs are L3/L4 stateful packet filters applied to subnets or NICs. They contain inbound/outbound security rules based on source/destination IP, port, and protocol. Azure Firewall provides L7 FQDN filtering.