What Azure feature defines inbound and outbound network rules to restrict traffic to a specific virtual machine?

Network Security Groups (NSGs) are used to filter network traffic to and from Azure resources in an Azure Virtual Network. An NSG contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources, including individual virtual machines. Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources, but it operates at a broader, subnet level, not typically for individual VMs. Route Tables define custom routing logic for network traffic within a virtual network. Application Gateway is a web traffic load balancer that enables you to manage traffic to your web applications.