Microsoft Azure Administrator Associate AZ-104 Practice Question

If outbound traffic is being routed correctly but the virtual machine still cannot reach the internet, a likely cause is that a Network Security Group (NSG) associated with the NIC or subnet is blocking egress traffic. Examine the effective NSG rules and make sure no higher-priority deny rule is overriding the default AllowInternetOutbound (or other required) rule. Being in an availability set has no impact on network connectivity. Assigning a public IP address or restarting the VM will not resolve connectivity that is explicitly blocked by NSG rules (although a public IP or NAT Gateway is required for outbound access on VMs created after 30 September 2025 if no other explicit method exists).