Explanation

Explanation

Explanation
A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.
You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Explanation

Box 1: Public Cloud
With a public cloud, there is no capital expenditure on server hardware etc. You only pay for cloud resources that you use as you use them.
Box 2: Private Cloud
A private cloud exists on premises, so you have complete control over security.
Box 3: Hybrid Cloud
A hybrid cloud is a mix of public cloud resources and on-premises resources. Therefore, you have a choice to use either.