Can you configure Micro segmentation (control traffic inside a subnet) on Azure?

Question

Options

• ANo, Micro segmentation is not supported on Azure
• BYes, via UDR
• CYes, via System Routes
• DYes, via routes on vNet

• A
  11% (4)
• B
  6% (2)
• C
  6% (2)
• D
  77% (27)

Explanation

Azure does support micro-segmentation, making option A incorrect. Option D is correct because Azure allows you to configure granular traffic control within a subnet by leveraging routing rules defined at the Virtual Network (vNet) level, enabling you to isolate and manage traffic flows between workloads even when they share the same subnet.

Option B (UDR) is a distractor because User Defined Routes are custom routes applied to route tables and associated with subnets to redirect traffic - primarily useful for routing between subnets through a network virtual appliance, not for intra-subnet micro-segmentation. Option C is wrong because System Routes are automatically created and managed by Azure; you cannot modify them to implement custom segmentation policies.

Memory tip: Think of it as "V for Virtualization" - vNet routes give you virtual control over your virtual network's internal traffic. If a choice says "system" (automatic, not yours to control) or "UDR" (subnet-to-subnet redirector), it's not the micro-segmentation answer.

No community discussion yet for this question.