You have an Azure subscription that contains the resources shown in the following table. Both VM1 and VM2 connect to VNET1 and are configured to use NSG1. You n...

You have an Azure subscription that contains the resources shown in the following table.

Both VM1 and VM2 connect to VNET1 and are configured to use NSG1.
You need to ensure that only VM1 and VM2 can access DB1.
What should you do?

A. For NSG1, configure a rule that has a service tag. B. Add the IP address range of VNET1 to the Firewall settings of DB1. C. Create an application security group. D. Configure DB1 to allow access from only VNET1.