A healthcare organization must isolate traffic between Dev, Test, and Prod environments while staying under a single subscription. What should they implement?

Azure Resource Groups provide a logical container for related Azure resources. By creating separate resource groups for Dev, Test, and Prod environments, the organization can manage and isolate resources for each environment independently, even within a single subscription. This allows for distinct deployment, management, and access control policies for each environment. Azure Availability Zones enhance application availability within a region but do not provide logical isolation between environments. Azure Virtual Networks provide network isolation but are typically used for network segmentation within an environment or between environments, not as the primary isolation mechanism for all resource types. Azure Regions are geographical areas and do not offer logical isolation between environments within a subscription.