VNET1 contains multiple subnets and each VM uses a static IP. Requirements: allow web requests from the Internet to VM3–VM6; allow all connections between VM1 and VM2; allow RDP to VM1; block all other traffic to VNET1. What is the minimum number of network security groups (NSGs) required?

You can achieve all requirements with a single Network Security Group (NSG) applied to the VNET1 subnet containing VM3-VM6, and another NSG applied to the subnet containing VM1 and VM2. However, the question asks for the minimum number of NSGs, and a single NSG can be associated with the entire VNet. By applying one NSG to the entire VNet, you can create rules that target specific VMs or IP ranges within that VNet. This allows for granular control while minimizing the number of NSGs to manage. Incorrect options: 3, 4, 12: While you could use multiple NSGs (e.g., one per subnet or even per VM), it's not the minimum required. A single NSG can be configured with rules that apply to specific IP addresses or ranges, satisfying all conditions.