Microsoft Azure Fundamentals AZ-900 Practice Question

Under the shared responsibility model in Azure's Infrastructure as a Service (IaaS), the customer is responsible for configuring network security controls such as Network Security Groups (NSGs) to manage traffic to and from virtual machines. Microsoft handles the physical security of data centers, the physical network infrastructure, and the virtualization layer (hypervisor), but the customer must secure their own virtual networks and virtual machines.