A Woodgrove Bank VM (app-nic01) in subnet svc-subnet is unexpectedly routing outbound traffic for 10.1.20.0/24 to a peered VNet instead of Internet. You need to inspect the effective routes applied to the NIC to determine which route (system, UDR, or propagated) is taking precedence. Which of the following is the correct way to get the effective routes for that VM NIC using portal and CLI?

The "Effective Routes" view in the Azure portal, accessible from a VM's network interface (NIC) blade, directly displays all routes applied to that NIC, including system routes, user-defined routes (UDRs), and routes propagated from a VPN gateway or ExpressRoute. This view clearly indicates the route source and precedence. The az network nic show-effective-route-table CLI command provides the same detailed information programmatically. az network watcher test-next-hop only shows the next hop for a specific destination, not all effective routes. Looking only at the subnet's route table is insufficient as other factors like system routes and propagated routes also influence the final routing decision. NSG flow logs show traffic flows and allow/deny decisions, but not the effective route table itself.