Microsoft Azure Administrator Associate AZ-104 Practice Question

Application Security Groups allow you to group virtual machines based on their function and apply network security rules to the group. This eliminates the need to specify IP addresses when assigning policies. Network Security Groups control traffic but are applied to individual resources or subnets, not groups of virtual machines serving the same role. Azure Firewall provides centralized network protection but doesn't group virtual machines based on function. Network Interfaces connect virtual machines to a network but don't facilitate grouping for security policies.