Your Azure environment contains multiple virtual machines. You must make the VM named VM1 accessible from the Internet over HTTP. Solution: You modify a network security group (NSG). Does this meet the requirement?

Yes, modifying a Network Security Group (NSG) can meet the requirement. NSGs are used to filter network traffic to and from Azure resources in an Azure Virtual Network. By adding an inbound security rule to the NSG associated with VM1's network interface or subnet, you can allow HTTP (port 80) traffic from the Internet (source IP range 'Any' or specific public IPs) to VM1. This directly controls network access at the virtual machine or subnet level.