Microsoft Azure Administrator Associate AZ-104 Practice Question

To allow internet users to access VM1 over port 80 without assigning a public address directly to the VM, you should set up an Azure Load Balancer with a public frontend. The load balancer forwards incoming traffic on port 80 to VM1's private address, complying with the security policy. Assigning a public address to a subnet is not possible and does not enable inbound traffic to the VM. A NAT gateway provides outbound connectivity for VMs without public addresses but does not support inbound connections. Azure Traffic Manager is used for DNS-based traffic load balancing across multiple endpoints and does not facilitate direct inbound access to a single VM.