Câu 23: SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You use Azure Virtual Network Manager to manage multiple virtual networks in a network group named Group1. You discover that the virtual machines in Group1 are accessible from the internet by using TCP port 3389. You need to block inbound TCP 3389 from the internet across all the virtual networks in Group1. The solution must minimize administrative effort. What should you use?

1. A. a connectivity configuration
2. B. a security admin configuration — đáp án hiện tại
3. C. a user-defined route (UDR)
4. D. a network security group (NSG)