Microsoft Azure Fundamentals — Question 16

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?

Answer options

• A. one application security group (ASG)
• B. 10 virtual network gateways
• C. 10 Azure ExpressRoute circuits
• D. one Azure firewall

Correct answer: D

Explanation

The correct answer is D, as an Azure firewall can effectively control and restrict inbound traffic to all virtual networks. The other options, such as application security groups and virtual network gateways, do not provide the comprehensive traffic management needed for this scenario, while Azure ExpressRoute circuits are used for private connections rather than traffic limitation.