Microsoft Azure Administrator Associate AZ-104 Practice Question

Because the other virtual machines in Subnet1 can reach the internet, the issue is specific to VM1. A network security group can be associated directly with a VM's network interface and might contain outbound rules that block internet traffic. Reviewing the effective NSG rules on VM1's NIC will reveal any rule preventing outbound connectivity. A public IP address is unnecessary for outbound access because Azure provides default outbound connectivity for VMs without public IPs. A virtual network gateway is used for site-to-site or VNet-to-VNet connections, not for general internet access. User-defined routes apply at the subnet level; since the other VMs work, a route table problem is unlikely.