Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

In Microsoft's defense-in-depth model, the network layer is responsible for managing and filtering traffic that moves between subnets, virtual networks, and the internet. Technologies such as Network Security Groups, Azure Firewall, and virtual network peering enforce segmentation and traffic rules at this layer. The other layers address different concerns: the physical layer protects datacenter facilities, the application layer secures application code and logic, and the data layer safeguards information at rest and in transit.