You deployed an Azure virtual machine named VM1 to inspect network traffic. Ensure that all network traffic is routed through VM1. Which configuration should you apply?

A user-defined route (UDR) is the correct configuration because it allows you to override Azure's default routing behavior and direct traffic to a specific next hop, such as your inspection VM (VM1). By creating a UDR that sends all traffic destined for a particular subnet or the internet through VM1's private IP address, you ensure VM1 acts as a network virtual appliance (NVA) for traffic inspection. System routes are default routes automatically created by Azure and cannot be directly modified to force traffic through a specific VM for inspection. A network security group (NSG) filters network traffic to and from Azure resources but does not dictate the path traffic takes; it only permits or denies it.