Microsoft Cybersecurity Architect (SC-100)Design security for infrastructureMedium
A large multinational corporation is migrating its on-premises data centers to Azure. The security architecture team needs to establish a secure and compliant environment. They are particularly concerned about ensuring consistent security policies, centralized management of network security, and isolation between different business units' resources while allowing controlled communication. Which Azure networking service is best suited to meet these requirements?
- AAzure Front Door
- BAzure Firewall Premium
- CAzure Virtual WAN
- DAzure Virtual Network (VNet)
Show answer & explanationAnswer & explanation
Correct answer: C. Azure Virtual WAN
Azure Virtual WAN provides a unified hub-and-spoke architecture for large-scale networking, integrating routing, security, and connectivity services. It allows for centralized management of network security policies, consistent application across multiple VNets and branches, and provides isolation between business units while facilitating controlled communication.
Why the other options are wrong
- A. Azure Front Door is a global, scalable entry-point that uses the Microsoft global edge network to create fast, secure, and widely scalable web applications. It's for web traffic delivery, not core network infrastructure management and security across an enterprise.
- B. Azure Firewall Premium offers advanced threat protection for VNets, but it's a firewall service, not a comprehensive networking backbone for enterprise-wide connectivity and policy enforcement like Virtual WAN.
- D. Azure VNet is fundamental for isolated networks but doesn't inherently provide centralized management for large, distributed environments or advanced security features across multiple VNets without additional services.
Azure Virtual WAN
A networking service that provides a unified interface for managing large-scale enterprise networks, connecting branches, data centers, and VNets through a hub-and-spoke architecture with integrated security and routing.
- Centralized network management.
- Integrated security and routing functions.
- Scalable for global deployments.
- Supports various connectivity types (VPN, ExpressRoute).
Memory trick: Virtual WAN Connects Everything Securely and Centrally.