Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
Microsoft · SC-500

Network security controls

SC-500 · Lesson 7 of 15 · 39:23

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the SC-500 exam (Microsoft Certified: Cloud and AI Security Engineer Associate). In this lesson: network security groups and application security groups, Virtual Network Manager security admin rules, secured virtual hubs with routing intent, and site-to-site and point-to-site VPNs. Includes three original practice questions.

Preview the topics
  • A central team must block port 3389 in all three hundred virtual networks, and no application team’s NSG may reopen it. What should it use?
  • A company with Virtual WAN wants all traffic between its virtual networks, and to the internet, inspected by Azure Firewall, without maintaining route tables. What fits?
  • Remote employees connect with a point-to-site VPN, and the company wants Conditional Access and multifactor authentication to apply. Which authentication type fits?