Network segmentation
Chapter 2, Describing Security Methodologies, discussed the layers of a defense-in-depth security strategy. The physical layer is Microsoft's responsibility as the cloud provider. Chapter 7, Describing the Identity Protection and Governance Capabilities of Azure AD, described how to protect the identity and access layer. This chapter will discuss Azure solutions that will protect the perimeter, network, compute, application, and data layers.
Network segmentation provides a secure boundary between resources by placing these resources within separated network segments. As you begin to explore Azure security capabilities, it is important to understand components that are the foundation of networking in Azure. Those components are Virtual Networks (VNets), subnets, and virtual network interfaces. Though defining these components is not currently within the scope of this exam, it is important to understand each as we move through this chapter.
VNets are...
