Which network security control operates at the subnet or network interface level with stateful allow rules?
- A Network Security Group
- B Azure Firewall
- C Application Gateway
- D Route table
Answer
Network Security Group
NSGs are stateful, so return traffic is allowed automatically, and they support allow rules only with an implicit deny at the end.





