Microsoft Azure Administrator Associate AZ-104 Practice Question

Application Security Groups (ASGs) allow you to group virtual machines based on their application roles, enabling you to apply network security group (NSG) rules to these groups rather than individual IP addresses or subnets. This approach simplifies the management of network security by providing a scalable method to control traffic flow for different workloads. Assigning the same NSG to all VMs does not provide the necessary granularity for different applications. Placing workloads in separate subnets with individual NSGs increases complexity and reduces flexibility. Implementing Azure Firewall is unnecessary for controlling traffic within a virtual network and adds unnecessary cost and complexity.