You have a network security group named NSG1 and you need to enable NSG flow logs for NSG1. Your solution must support retention policies for the logs. Which resource should you create first?

To enable NSG flow logs with retention policies, you must first create a standard general-purpose v2 Azure Storage account. This type of storage account supports the necessary features for storing flow logs, including the ability to configure retention policies. An Azure Log Analytics workspace is used for analyzing and querying logs, but it's not the initial storage destination for NSG flow logs when retention policies are required. A standard general-purpose v1 Azure Storage account is an older type and lacks some features required for modern Azure monitoring solutions like NSG flow logs with retention. A premium Block blobs Azure Storage account is optimized for high-performance block blob scenarios and is typically more expensive than needed for NSG flow logs, which don't require premium performance.