Layer 3 · Session 22 · Planned · Not validated

Network Security Groups

An authoring contract, not a completed lesson.

Purpose

Introduce network security groups because the workload needs a new decision or capability.

Learning objectives

• Explain the model in workload context.
• Compare responsibility and cost tradeoffs.
• Apply it through a reproducible CLI-first exercise.
• Verify and clean up.

Concepts planned

Definition, architecture connection, purposeful visual, prediction, comparison, and fact/recommendation labels.

Expected lab outcome

One observable, independently verified change with cost, security, reliability, and operational effects.

Prerequisites and continuity

Previous: Session 21 — Subnets and workload separation. Next: Session 23 — Routes and route tables.

Author notes

• Check official Microsoft docs.
• Add explicit scope, variables, verification, cleanup, and cost.
• Execute in disposable resources and record environment/date.
• Test failure paths and update architecture.