StudyToCert

All certifications / SC-500 / Lessons

Microsoft Certified: Cloud and AI Security Engineer Associate (replaces Azure Security Engineer Associate / AZ-500) SC-500 · Domain 2: Secure storage, databases, and networking

Azure Firewall (Standard vs Premium: TLS inspection, IDPS, URL filtering), Firewall Manager and firewall policy, forced tunneling with user-defined routes

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Azure Firewall is a managed, stateful, highly available network firewall you deploy into a dedicated subnet named AzureFirewallSubnet, usually in a hub virtual network. Spoke networks send their traffic through it so you can centrally allow, deny and log east-west and north-south flows. It comes in Basic, Standard and Premium SKUs; this exam focuses on Standard versus Premium.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SC-500 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-500 study plan