You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1. You deploy an instance of Azure Application G...

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains a subnet named Subnet1.
You deploy an instance of Azure Application Gateway v2 named AppGw1 to Subnet1. You create a network security group (NSG) named NSG1 and link NSG1 to Subnet1.
You need to ensure that AppGw1 will only load balance traffic that originates from VNet1. The solution must minimize the impact on the functionality of AppGw1.
What should you add to NSG1?

A. an outbound rule that has a priority of 4096 and blocks all internet traffic B. an inbound rule that has a priority of 4096 and blocks all internet traffic C. an inbound rule that has a priority of 100 and blocks all internet traffic D. an outbound rule that has a priority 100 and blocks all internet traffic