Microsoft Azure Administrator Associate AZ-104 Practice Question

An outbound rule in a network security group (NSG) blocking internet traffic is the most likely cause. NSGs control inbound and outbound traffic to and from Azure resources. If an outbound security rule in the NSG denies internet traffic, the virtual machine will be unable to access external websites. Firewall settings within the virtual machine's operating system could also block traffic, but this would typically affect both internal and external connectivity. A public IP address is not required for outbound internet access because Azure provides default outbound access via source network address translation (SNAT). A gateway subnet is used for VPN connections and is not necessary for internet connectivity.