You create an Azure subscription and plan to deploy the resources listed. You must add an NSG rule named Rule1 for NSG1 with these requirements: allow the App1 search servers to make outbound HTTP requests to internet services, minimize administrative work when new search servers are added, and follow least privilege. Which source type should you choose for Rule1?

Application security groups (ASGs) allow you to group virtual machines (VMs) logically based on their application function, such as "App1 search servers." You can then define network security group (NSG) rules that reference these ASGs. This approach minimizes administrative work because when new search servers are added, you simply assign them to the existing ASG, and the NSG rule automatically applies to them. It also follows the principle of least privilege by only allowing traffic from specific application components. IP Addresses would require you to list every IP address of each search server, which is not scalable and increases administrative overhead when servers are added or removed. "Any" would allow all outbound traffic from any source, violating the principle of least privilege. VirtualNetwork would allow all traffic originating from within the entire virtual network, which is too broad and not specific to the search servers.