Microsoft Azure Administrator Associate AZ-104 Practice Question

Network Security Groups (NSGs) in Azure control inbound and outbound traffic to resources. Since both VMs are in the same virtual network but different subnets, and there are no operating system firewalls blocking the port, it's important to examine the NSG associated with Subnet2 (where VM2 is located). An NSG attached to Subnet2 might have rules that block inbound traffic on TCP port 80, preventing VM1 from connecting to VM2. Checking and modifying the NSG rules to allow inbound traffic on port 80 would resolve the issue.

• Verifying virtual network peering is unnecessary because the VMs are within the same virtual network.
• Checking the NSG associated with VM1's network interface for outbound rules is less likely since default outbound traffic is usually allowed unless explicitly denied.
• Investigating the route table is less relevant here unless custom routes have been configured that misdirect traffic.