Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityEasy
A small business is setting up its cloud environment and wants to implement a security policy that ensures all network traffic entering or leaving their virtual network is filtered based on predefined rules, such as source IP, destination port, and protocol. Which security concept is being applied here?
- AIdentity Protection
- BData Encryption
- CNetwork Security
- DEndpoint Protection
Show answer & explanationAnswer & explanation
Correct answer: C. Network Security
Network Security focuses on protecting the network infrastructure and network traffic from unauthorized access, misuse, modification, or denial. Filtering traffic based on IP, port, and protocol is a fundamental aspect of network security, typically implemented using firewalls or Network Security Groups (NSGs).
Why the other options are wrong
- A. Identity Protection safeguards user identities, not network communications.
- B. Data Encryption protects data at rest or in transit, but the scenario emphasizes traffic filtering, not just encryption.
- D. Endpoint Protection secures individual devices, not network traffic flow.
Network Security
Measures taken to protect the underlying networking infrastructure and network traffic from unauthorized access, misuse, malfunction, modification, destruction, or improper disclosure.
- Includes firewalls, intrusion detection/prevention systems, VPNs.
- Focuses on controlling traffic flow and securing network devices.
- Aims to prevent network-based attacks.
Memory trick: Network Security is like a border patrol for your data, checking every package.