Azure Firewall for centralized security - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Azure Firewall?

Azure Firewall is a cloud-based network security service that protects your Azure Virtual Network resources by filtering and controlling traffic centrally.

beginner

How does Azure Firewall help with centralized security?

It provides a single place to create, enforce, and log application and network connectivity policies across multiple Azure subscriptions and virtual networks.

intermediate

Name two types of rules you can configure in Azure Firewall.

You can configure Network rules (for IP addresses, ports, and protocols) and Application rules (for fully qualified domain names - FQDNs).

intermediate

What is the benefit of Azure Firewall's integration with Azure Monitor?

It allows you to collect logs and metrics for traffic analysis, threat detection, and auditing, helping you understand and improve your security posture.

advanced

Why is Azure Firewall considered stateful?

Because it keeps track of the state of active connections and makes decisions based on the context of traffic, not just individual packets.

What type of service is Azure Firewall?

A Physical hardware firewall

B Cloud-based network security service

C Antivirus software

D Identity management service

Azure Firewall is a cloud-based network security service that protects Azure resources.

Which rule type in Azure Firewall controls traffic based on domain names?

A Application rules

B Network rules

C User rules

D IP rules

Application rules filter traffic based on fully qualified domain names (FQDNs).

What does it mean that Azure Firewall is stateful?

A It blocks all incoming traffic

B It only filters traffic by IP address

C It requires manual updates

D It tracks active connections to make decisions

Stateful means the firewall tracks the state of active connections for better traffic control.

How does Azure Firewall support centralized security management?

A By managing policies across multiple virtual networks and subscriptions

B By installing software on each virtual machine

C By encrypting data at rest

D By providing user authentication

Azure Firewall centralizes policy management across networks and subscriptions.

What is a key benefit of integrating Azure Firewall with Azure Monitor?

A Automatic patching of firewall software

B Increasing storage capacity

C Collecting logs and metrics for security analysis

D Reducing network latency

Integration with Azure Monitor helps collect logs and metrics for better security insights.

Explain how Azure Firewall provides centralized security for Azure resources.

Think about managing security rules and monitoring from one place.

Describe the difference between network rules and application rules in Azure Firewall.

Consider what each rule type looks at to allow or block traffic.